last executing test programs: 1m38.153066718s ago: executing program 1 (id=1640): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') r1 = syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) close(0x3) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) syz_usb_disconnect(r1) ioctl$KVM_GET_CPUID2(r0, 0xc008ae91, 0x0) (fail_nth: 2) 1m36.55313316s ago: executing program 1 (id=1659): sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000001000)={0x2, 0x4c24, @remote}, 0x10, 0x0}, 0x48050) openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x802, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) sendmmsg(r0, &(0x7f0000000ec0)=[{{&(0x7f00000002c0)=@l2tp={0x2, 0x0, @private=0xa010100, 0x4}, 0x80, &(0x7f0000000340)=[{&(0x7f00000006c0)="cc5c84001214dbd9e5943aa8a315357330c56529d6b619a78687eea13ea02981afbb0fab70e8c3ab037cd82bd48f4947702a177974e7eff5f2ccdec909645f69e3dea5153157374459f6a21ba8609552d9ada54e81b0f19b55b77cf382ad22", 0x5f}, {&(0x7f0000001400)="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", 0xbd0}], 0x2}}, {{0x0, 0x0, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000880)}, {&(0x7f0000000a40)}], 0x3}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000640)="5506b6", 0x3}], 0x1}}], 0x3, 0x11) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_open_dev$usbfs(&(0x7f0000000880), 0x5, 0x238000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}, 0x1, 0x0, 0x0, 0x2}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) 1m36.441253239s ago: executing program 1 (id=1660): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='batadv_slave_1\x00', 0x10) r1 = socket$inet(0x2, 0x801, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x2b00, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) 1m36.440912763s ago: executing program 1 (id=1661): write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x43) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000040)={0xffffffffffffffff, 0x7, 0x2, 0x7fffffff}) sendmsg$TIPC_NL_NET_GET(r0, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x108000}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x180, 0x0, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x64, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xffffffff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7fff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xa7b}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7d820022}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9299}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x800}]}, @TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xf4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}]}, @TIPC_NLA_NODE={0x44, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x40, 0x4, {'gcm(aes)\x00', 0x18, "71680cfe7c7c202542daf2472f7882205abaecaf81e7cb2d"}}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xb7f}]}, @TIPC_NLA_NET={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xb6e}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfffffffd}]}, @TIPC_NLA_MEDIA={0x30, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1811}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xbe6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffe}]}]}]}, 0x180}, 0x1, 0x0, 0x0, 0x40000}, 0x40) socket(0x9, 0x3, 0x2) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioperm(0x0, 0xe4d, 0x2) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) ioctl$sock_netdev_private(r1, 0x8914, &(0x7f0000000000)) 1m36.439124208s ago: executing program 1 (id=1662): r0 = memfd_secret(0x80000) ftruncate(r0, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000080)={0x8}) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f00000000c0)=0x8, 0x4) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) mremap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil) syz_emit_vhci(&(0x7f0000000640)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_LE_SET_SCAN_PARAM={{0x6}, 0x8}}}, 0x7) 1m36.14892151s ago: executing program 1 (id=1667): r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x30, 0x1, 0x3, "0000b967351bca40ba3e27ff7eefad00010000fffffffff2ffffffffffffff00", 0x3831354f}) r1 = fsopen(&(0x7f0000000000)='exfat\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000001100)='iocharset', &(0x7f0000001140)='\xe0^@&&}\'\x00', 0x0) (async) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000001100)='iocharset', &(0x7f0000001140)='\xe0^@&&}\'\x00', 0x0) close_range(r1, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NG_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x7}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0xe}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}}, 0x0) 1m21.062103715s ago: executing program 32 (id=1667): r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x30, 0x1, 0x3, "0000b967351bca40ba3e27ff7eefad00010000fffffffff2ffffffffffffff00", 0x3831354f}) r1 = fsopen(&(0x7f0000000000)='exfat\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000001100)='iocharset', &(0x7f0000001140)='\xe0^@&&}\'\x00', 0x0) (async) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000001100)='iocharset', &(0x7f0000001140)='\xe0^@&&}\'\x00', 0x0) close_range(r1, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NG_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x7}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0xe}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}}, 0x0) 1.638076094s ago: executing program 2 (id=3020): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x802, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) sendmmsg(r0, &(0x7f0000000ec0)=[{{&(0x7f00000002c0)=@l2tp={0x2, 0x0, @private=0xa010100, 0x4}, 0x80, &(0x7f0000000340)=[{0x0}, {&(0x7f00000007c0)="a960e57530b65741465209e7c6235055450b1ed3da8592b928d8e20971659d8e3ca392643af5fa7ae0e3455099a5f7b857afa34cbf9962bdc9db46a15e7dcf9412a2b98b6ae75ca1bd7eae82d94855e9ced28430f77527b7c0b9", 0x5a}], 0x2}}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000003880)="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", 0xf72}, {&(0x7f0000000880)="90b9f79fecb3ad0dc00ca95fb148a3ba4355cee5ce27d2c10d8474464a37dea0c1ab2a961404f5aa5493cdadb4b6bf4131e96c0aef0f89065db2aa551c68ce3fa911638fd608ff9e30cce409b6e516e59c272cdbbb88c83dc61199d70f8f7e05d9639d278d53151a6720a51979ffd78dcc1a000929160435bd61e3f36c78b9bd5baef79be54e537dfc26029f52cfd5b4dd3416fc140fce45c077ab5ee206763130ccdaedd3bff9b7a20b6b02e558fddbaf1bff01a4e9c33db2", 0xb9}, {&(0x7f0000000a40)}], 0x3}}], 0x2, 0x11) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={0x0, 0x6f4}}, 0x0) 1.561830845s ago: executing program 2 (id=3022): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002b00)=[{{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000000180)="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", 0x195}], 0x1}}], 0x1, 0x10) socket$kcm(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x75b08000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) socket$inet(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x5, 0x3800, 0x7, 0x11}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r3 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0xfffc, 0x0, 0xa}, {0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[], 0x10}}, 0x0) 1.500363627s ago: executing program 0 (id=3023): sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000001000)={0x2, 0x4c24, @remote}, 0x10, 0x0}, 0x48050) openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x802, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) sendmmsg(r0, &(0x7f0000000ec0)=[{{&(0x7f00000002c0)=@l2tp={0x2, 0x0, @private=0xa010100, 0x4}, 0x80, &(0x7f0000000340)=[{&(0x7f00000006c0)="cc5c84001214dbd9e5943aa8a315357330c56529d6b619a78687eea13ea02981afbb0fab70e8c3ab037cd82bd48f4947702a177974e7eff5f2ccdec909645f69e3dea5153157374459f6a21ba8609552d9ada54e81b0f19b55b77cf382ad22", 0x5f}, {&(0x7f0000001400)="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", 0xbd0}], 0x2}}, {{0x0, 0x0, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000880)}, {&(0x7f0000000a40)}], 0x3}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000640)="5506b6", 0x3}], 0x1}}], 0x3, 0x11) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_open_dev$usbfs(&(0x7f0000000880), 0x5, 0x238000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffff"], 0x6f4}, 0x1, 0x0, 0x0, 0x2}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) 1.355007911s ago: executing program 0 (id=3024): r0 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0xfc00) 1.224777417s ago: executing program 0 (id=3026): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r3 = socket$inet(0x2, 0x2, 0x1) r4 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000000600)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f00000001c0)="96bced8af9c8", 0x6}], 0x2, &(0x7f0000000140)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @dev={0xac, 0x14, 0x14, 0x23}, @dev={0xac, 0x14, 0x14, 0x1d}}}}], 0x20}, 0x42090) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a40)=@newlink={0x3c, 0x10, 0x403, 0x70bd29, 0x0, {0x0, 0x0, 0x74, r2, 0x0, 0x4010}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0xffe}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@mpls_delroute={0x30, 0x19, 0x1, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_VIA={0x14, 0x12, {0xa, "a51b69ae9597407dc5518eada89d"}}]}, 0x30}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000020000000000000f9ffff0b85000000ae000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) setsockopt$RDS_GET_MR_FOR_DEST(r4, 0x114, 0x7, &(0x7f0000000340)={@rc={0x1f, @none, 0x9}, {&(0x7f00000002c0)=""/95, 0x5f}, &(0x7f00000000c0)}, 0xa0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 1.111302503s ago: executing program 0 (id=3027): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x600042, 0x0) ioctl$TUNSETNOCSUM(r0, 0x400454c8, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x8f, &(0x7f0000000480)=""/143}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) (async) r2 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000140), 0x800, 0x0) ioctl$FBIOPUT_CON2FBMAP(r2, 0x4610, &(0x7f0000000180)={0x1}) ioctl$FBIOPUT_CON2FBMAP(r2, 0x4610, &(0x7f0000000000)={0x1, 0x1}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000), 0x4) (async) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000140)=0x7, 0x4) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000940)=@newtaction={0x18, 0x31, 0x4, 0x500, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000740)=@delqdisc={0x1cc, 0x25, 0x400, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x3, 0xffe2}, {0x1, 0x9}, {0xd, 0x2}}}, 0x1cc}}, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000540)=@getchain={0x24, 0x66, 0x400, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xe, 0xe}, {0x5, 0xfff1}, {0xc, 0x3}}}, 0x24}}, 0x840) (async) r7 = socket$unix(0x1, 0x2, 0x0) bind$unix(r7, &(0x7f0000003000)=@abs={0x1, 0x0, 0x4e21}, 0x6e) r8 = socket$unix(0x1, 0x1, 0x0) bind$unix(r8, &(0x7f0000003000)=@abs={0x0, 0x0, 0x4e20}, 0x6e) (async) syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') (async) r9 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') (async) r10 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') r11 = openat$binfmt(0xffffffffffffff9c, r10, 0x42, 0x1ff) write$binfmt_elf64(r11, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c4602010103fcffffffffffffff03003e005666d37500010000000000004000000000000000df012000040000000000000003003800010007000200010003000000000000000300000000010100ff"], 0x509) close(r11) r12 = openat$binfmt(0xffffffffffffff9c, r9, 0x42, 0x1ff) write$binfmt_elf64(r12, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x120) (async) close(r12) 926.888207ms ago: executing program 0 (id=3032): sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000001000)={0x2, 0x4c24, @remote}, 0x10, 0x0}, 0x48050) openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x802, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) sendmmsg(r0, &(0x7f0000000ec0)=[{{&(0x7f00000002c0)=@l2tp={0x2, 0x0, @private=0xa010100, 0x4}, 0x80, &(0x7f0000000340)=[{&(0x7f00000006c0)="cc5c84001214dbd9e5943aa8a315357330c56529d6b619a78687eea13ea02981afbb0fab70e8c3ab037cd82bd48f4947702a177974e7eff5f2ccdec909645f69e3dea5153157374459f6a21ba8609552d9ada54e81b0f19b55b77cf382ad22", 0x5f}, {&(0x7f0000001400)="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", 0xbd0}], 0x2}}, {{0x0, 0x0, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000880)}, {&(0x7f0000000a40)}], 0x3}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000640)="5506b6", 0x3}], 0x1}}], 0x3, 0x11) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_open_dev$usbfs(&(0x7f0000000880), 0x5, 0x238000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff08"], 0x6f4}, 0x1, 0x0, 0x0, 0x2}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) 866.983187ms ago: executing program 0 (id=3034): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000105509147200ed0000000109022400010000000009040000030300000009210000000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000100)={0x2c, &(0x7f0000000300)=ANY=[@ANYBLOB="200617"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="1c0000001400010000008000"], 0x1c}], 0x1}, 0x0) 720.963214ms ago: executing program 4 (id=3037): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000038000000380000000300000001000000000000010000000000000000000000000000000105000000100000000000000000000003000000000100000002"], 0x0, 0x53}, 0x20) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='rdma.current\x00', 0x26e1, 0x0) close(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) mount$9p_fd(0x0, &(0x7f0000000080)='./bus\x00', 0x0, 0x1002020, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000a40), 0x2, 0x0) write$uinput_user_dev(r2, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x80000000, 0x3, 0x3ff, 0x8, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xf, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8, 0xffffffff, 0x0, 0x7, 0xf5b1, 0xffffffff, 0x10000000, 0x99, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x0, 0x0, 0x1], [0x3, 0x0, 0x0, 0x400000, 0x0, 0x80000, 0x0, 0xedc0, 0x0, 0x5ee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffff8, 0x2, 0x0, 0x2000079, 0x400, 0x0, 0x0, 0x10000, 0x40000, 0x0, 0xc0800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x4c6, 0x0, 0x0, 0x4771], [0x0, 0x7f, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, 0x0, 0x0, 0x9, 0x0, 0x2, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x6, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4, 0x0, 0x0, 0x0, 0x800], [0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x3, 0xfffffffc, 0x4, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, 0xfffffffd, 0x0, 0x0, 0x0, 0x8001, 0x80, 0x0, 0x800, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x4, 0x0, 0x0, 0x0, 0xffffe]}, 0x45c) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x5) ioctl$UI_SET_SWBIT(r2, 0x4004556d, 0x3) ioctl$UI_DEV_CREATE(r2, 0x5501) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002100)='/proc/bus/input/devices\x00', 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000002000010000000000000000000a002040000000070000001400110076657468305f746f5f627269646765001400030076657468315f766c616e00000000956fffe66556d28293c52357a106cb875a26c8a7f9e400"], 0x58}, 0x1, 0x0, 0x0, 0x24040804}, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) ioctl$TCXONC(r3, 0x540a, 0x3) read$FUSE(r3, &(0x7f0000002300)={0x2020}, 0xfcdd) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000100)={'veth0_to_bond\x00', &(0x7f0000000000)=@ethtool_perm_addr={0x20, 0x12, "18304e5f8a314a57a155a4bbd137af0807c3"}}) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) r6 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x401) ioctl$SCSI_IOCTL_SEND_COMMAND(r6, 0x1, &(0x7f0000000840)={0x0, 0x0, 0x3b8}) ioctl$SIOCSIFHWADDR(r0, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 643.714185ms ago: executing program 3 (id=3039): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000005c0), r0) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000007c0)={0x20, r1, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x30000, 0x0, 0x800}, 0x4008840) 642.939298ms ago: executing program 3 (id=3040): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000001ec0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000000580)="c4e5", 0x2}], 0x1, &(0x7f00000019c0)=ANY=[], 0x108}}], 0x2, 0xc8040) sendmmsg(r2, &(0x7f0000002880)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000300)='V', 0x1}], 0x1}}], 0x1, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x10}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x6, 0x10, &(0x7f0000000e40)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000300000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b704000008000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000001c0)='X\x00', 0x2}], 0x1) r6 = getpid() r7 = syz_pidfd_open(r6, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) open_by_handle_at(r7, &(0x7f0000000180)=ANY=[@ANYBLOB="15000000fe00"], 0x1) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000001100)={0x1, 'wlan1\x00', 0x2}, 0x18) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001280)={@map=r4, 0x15, 0x0, 0x3, &(0x7f0000001140)=[0x0], 0x1, 0x0, &(0x7f00000011c0)=[0x0, 0x0], &(0x7f0000001200)=[0x0], &(0x7f0000001240)=[0x0]}, 0x40) r9 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r9, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=r10, 0x4) r11 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000001dc0), 0x60200, 0x0) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r11, 0x8008f511, &(0x7f0000001e00)) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r5, r1, 0x25, 0x0, @val=@target_btf_id=r10}, 0x14) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000013c0)={r8, &(0x7f0000001180)="4c2e2f387761a3c918729db4d7fb8db944dc03066934a3d0ad8cfbafba180c37fccbdc017467a2a8ead711d500eaf3f6fc4159d73a079b060554f31220", &(0x7f0000001300)=""/141}, 0x20) syz_emit_ethernet(0xd81, &(0x7f0000000040)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x17}, @void, {@ipv6={0x86dd, @tcp={0x6, 0x6, "9415d9", 0xd4b, 0x6, 0x1, @dev={0xfe, 0x80, '\x00', 0x2c}, @empty, {[], {{0x4e20, 0x4e24, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x0, 0x101, 0x0, 0x8}, {"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"}}}}}}}, 0x0) r12 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r12, &(0x7f0000000200)={0xa, 0x4e21, 0x3, @empty, 0xfffffffe}, 0x1c) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001040)={0x6, 0x15, &(0x7f0000000ec0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xad}, [@map_fd={0x18, 0xdcb04117263ff7d2, 0x1, 0x0, r4}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4116}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x3}, @jmp={0x5, 0x0, 0xc, 0x1, 0x8, 0x40, 0x10}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x80000000}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @map_fd={0x18, 0x1, 0x1, 0x0, r4}, @exit]}, &(0x7f0000000e00)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000f80)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000fc0)={0x0, 0x3, 0x4, 0x341}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f0000001000)=[{0x3, 0x3, 0x2, 0xa}, {0x4, 0x4, 0x4, 0xc}], 0x10, 0x3}, 0x94) 571.533542ms ago: executing program 4 (id=3041): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x802, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) sendmmsg(r0, &(0x7f0000000ec0)=[{{&(0x7f00000002c0)=@l2tp={0x2, 0x0, @private=0xa010100, 0x4}, 0x80, &(0x7f0000000340)=[{0x0}, {&(0x7f00000007c0)="a960e57530b65741465209e7c6235055450b1ed3da8592b928d8e20971659d8e3ca392643af5fa7ae0e3455099a5f7b857afa34cbf9962bdc9db46a15e7dcf9412a2b98b6ae75ca1bd7eae82d94855e9ced28430f77527b7c0b9", 0x5a}], 0x2}}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000003880)="f9292cd1d11865c51c5447b349fe89be02e268e8d2e0f66515e514820024a3561e1ed6f2082b9f73eeeb113674f44f5c388ca9853619ebecd21f9b712a14e24054cfb9b5362493ce63a4dd2ef12bf5c67567927fb4e3e7a188b22384e8f1317f72c717a3e893800c1f1774eb42de222824e12ff880cd974848f9468cd8d632e2e95a13f5022a5b9c66d741d4b1777460a8b6e9c360813ee83f35159e8dea7ef03359d7185d560b0ae10b109a8d3fd3be6ed5cadd69e5e32e3c1f94427ba74d7baa41c3f50a7163947f366c12db05ae969ab2a821c0d1032b5dd63f43f8055201a7f4b948f48133cbf5f6c6a913bd1bc0f2cce4516e400204a25b7a750af979c0fd8fe7ee8976833c50b859681ba6fa70241ce4523e4465b60ad9219d566e31d37c6d625450600c627833750e2da54dc25d5f6e91e6a3480a01d6d056497829c4203f0c46e9e2f042576221b0e370697585c09526b0bfca89a8f12d13adb4452f5bd8e40de944e1f13b558c73a93c43c53d2844ae7fac848b8bb21cf2a5693d373a9e2127138c36358a3f9a887ff2742a3d362cbd4892844372284841f0cc08b4efd2d4053b58cd5a198a483db1148311c4b9dd265b1636ba84678d3de2b5fcd0d9c15bbc1a8dacdef6baebde85760ead205c48e1cdaf1cd32755526c96c4763547e9432c90f1a0edef156714533133a58a36fb086837415db5afaff265ee857f01d9bf57aa7a68dca561573076475803c5143cce335bd36164107e62de9184d13e3143dbc979c05365b4bac6d6a2535d79d2cd32a3bf3ee8a3fe24e5b26eaadf2460ebad780ed6116fcccb127ae741bcd2038dda3e8f2a539e40290c9f7114639fb292673e1585e6deefa5761236734811c4c0b7ede0a9f7d650d88c984d9362e4131b4cda1f2073769ce991e6f4c675c4e3235741fe78095425b0c49d6233c8f9f7ec62e2dc60e7e85056396de5927d1c825288e922f9550d3c0f302fe294f6d8dc5cc6b9db2255d1f952cf1b04de21b109badb89b1d6f5d83d46c4b5b759f80833524a0c294b83ab682903e30a241fec30aca3adcedae02305b4f5fed22167ff614e585e73422369c54a3d3239acf454ccb7293d8ea8a4fc3aa4d2d7c3c203448809474096ef5297d1225a678c271f84e65303adcda51d29a5f8b3cb28a4fb52321bc2b3d78a33de69a837a2cd2f9dab09b259ed7b12796cea41d60bf3a83e4cb9f11751c1cb7b0cf8a845b29ae2397f8305d0aba4cc8fbfff8cfbe4430af0b673191117fa42212a4b5e0632e510f1c153a402f02329214947f232090fb8e6b5d02a0d393241cf6b76d6943506d7b9898f1d9c22ac6508d9156304eeb315ee56008f3bcccb1435ab99b0b96d73a8d11f1c8bdc733e66ad08eeebf739583c19bfd331cd68c0e7613573c5c5b729e1962e35f09adc906dbeabf3aa1ad0ecbf13f2c036e7fc7a29f36b6b43650a82e3e620dc87a96f942dc68af6032cf32e0986b6b088d2b6e96c9f5fe8192949e571e2608c6ad7f65c6a17a8ea3eb81edec26f08c712e3f54eba943290b94be5ffcd2e314d3a83f9f53440e38e5c0d26284c30766b615cd45558b8dac41ab81d64f76e528988247224222f8b8a5b87d6376b216bc35fce496cf732447ac5639d38a183c283a6bdd155e2e5204e301175ddc53452ac001c11c63599ed155a6d1a4acc8be942aa689c6485e00f958376064a69766b1bf75cb2a79343f87e8c753b61fb26b217b77c1b76c3eb858326480601d58ce43b6966fb93b2dd4af17fd1ebffce00fde22a72cbe0c93c86e6376228eaf2db8d1b97d3763d78550e022d1800626adb954449200af5d036307a9c72489e78bbc27da3418591eaffbfdcc61e31d24fba8f708c12848ddf45dca5accee1a2dd7915b2d7770141df1580d1ee21c342fdae9fb46bc0b1cf2edd9ae686b81d0767cc9080a598f63b189e052dcb8e46d21ca1fc2e949eea7cfa54f27f96f27cdf673bf75cd0c8bb6277ba01ade5c313fe57ef08bec60c9bef8920d73c2e918b4234f3b5dd4559945b89c14ec986d3dea47a703d0406ee972340a1832feb6561c3891945db59fc2967e091d8b8da3610e883e9fa71eca2017e375343857971b94551b19acb28cf765e98ed37e38a582e16f297df883d598a24b5fc253c2489e1a4e683d027f064a40db035b25d7a6d69ffa37b6babb7ba80dc45516b72061ccb1550c0dc258016ec1e2a7bcfe1330ae6f07098d84e5a1680eb3ff2eeaad300776deb0e8dc03df4d26bee14b8a26b63f8c3390cae064db3086eff8b092becbe0e8256ef6fd69c673bdbc39949dd4c903a01ed88a91829142d2402a294095abfbd5058d25185004b87571c593c0ca9e0d7edc2c7c76134c62426791fa43f6604a1d66d60b71aa1bb5b5684bcb19088139159716641f0613f4fc99b6c4fabd7acfb2bd5f0db9e61da44efdc1a669ee809c95831dca2ce00cc204b976b1c333fb16d7b0aeeac5a3f360ff8b07bcd08e817aa5ac914344088f9245943b93c67f4ff35f34b4443e0a54e20bfbea3127faa3fd4ae30d0c57b8f8cc92aedbfcb36d380b7d3760f9762086a6113203dd0f7e8417ec63c03d793a19c8daf0ab0fff629390bbc7c54d342b456aa32c989e46d7cbfff456ee8f1b83309d49ca875faf005934eea9ec72746dac4f080c40e8d3743ed21785eec34b9f7a65c0b11f414e550942fb3bdb0064c59aea61824c27e5b288c910c0ae843dd9784d8679df8ffe9da8a82b567d77a9ed93608043cf9f1926129479f850d1522db538b89341ea33749a61bf82601e6e788577b6767a19a1b3a1e7f18cdd21f703c4c573e44cf9afd9064e8319328397296bc2f9806981902f653b0c56b12ac7367db25981988b8fc9a735ade4e7ff27a9a1d55ae1a9282c33bd3a4af6488494ace3d72606141d2fee50b025dc775ab1f77b9f4a9bcc678a66ce3693abc7080840509e8996663c24968a187cf77d7cf006318fa269d4194894e5850fe535cdd109b3e7b5f2fefc609f75e64e6c83f10e11dd71784d15bd2745d6e93f1660973df015aa036d22f8094530e0272393a11b5cfe4c58786e1d547f036849f4b95fe6063da9ae60a126d525b9ff97c1b98a881d16af0c77c559b6a4dd24dbcc216dec852e1a5088f4624de506fac9d8ff5e4b18a162e4f237dfcefc883a70880cf190ffbb67c7d09fcabf5daf76ed7eb1f581fbbc4a4749881db43dd6852aaf95b8a6d38bbe2a9b7aad87f0698291d25232d4d2ec232a954ca1840102bcdcb458f6f53b9e9e6f11a6a3d596f37ff7aa04027ab24132d4e7bc7e0bb07af6433396943acec98048b15d8f9b757da5f732969cac0ba14029914346cab6112fc50e4ac1858f988723edfd9a98888844c9b43973c835fbcfd3903416f7048cc0d94b68ebba06ee70105449d91a6f514420901fd6c7b4a626dc174a22769d5d1d53f7510ceb3525d94cf3885d7ff81fbf200f41ed7b3b60e0d646fef80ea125be568650c51db8aa606993c7646a0fe9bbdec83ea5db88c436269161c7d68cb71e80a8ac4aedc57e721404337634c83f73664b9861c73bea2cea0408857d3816b0378bf2efcefa4942c416c976bb6ce601eba8274fa63a440bf1fa2a83d39a94d37af2b3a4608a1ba4c66c7f70261e62b24f3cc2b76f8ab34514e93b5857877ee4fcd4cbfb164f87c52721e16c4701ff0e0f85c72dbda681b300b242edbef0a089fcb85d6dc319bdfac1b21cc30061ebbf14bd0d626b3754e368dd0629ce45c2d34b1248de10bc0d11d5f7ad63f547c4b29d40962ae33596290bdcbbc43fd8a5e4ffe798282718533fbd42437ec900a5da14d17451131cc4d833110cc0f2657d1fa465dd22f73f1326e3c5336f978497641aea775ee6fb3a22bd8f40feba40f918d23f6f6ca5e132d7a359997b1d176cde421459b797ec01c6ea821197f5383089681fab7e7804d5988d9b3aedbb3727ae81f1168afce59955ca8970802b8891b1ce0d0613c4c4549494f65c7868ea955ebc6a410ebd01ecf096fe4c3e7cae58e34a5c3e53b72ae27b25a4a3eaa5f6fe6c63beca4df6c299cf0eaf3f959a1d9729bda53e6e014964bc5e8b5fcaee1883426c4eeb2240af3ce8801e63a0d4132eb8636db3f29e09d5c4051f70ebc0c1b5ca7d4f14b38061eee2099265b914604e17f633e4d0e9bcb5eeea696c4749bd7e9d2796744423c8587cc100990e24da307ad85f92f9d0ab93e8b630bb95597aba46c3ddd99558e2fef6b717dc3a74244560af73d62155d56b4a76f7585b5e1b9519a8f21627214c181efeed8c00087a34c0d5932144fcbdb54eca72ef918004f76098aa0d16a9e8f5abdf8c83498ed0e58e34e2c63433a75602e981fdda800544608a0ca2e1ac990a8b25f6ce32f5100915f758a52ec43b7400f4da748106bc21bf2ed2bdf58fa157cc8f3e3a2112bcb735e866ae994840155dd5d825eb02702f72c1e4e4e498455556b6791f235572fbfe351ff34bbc5c53f3450f9e99cf36c56de52625237d415eeaad3067c8734fb6b29f394a2b0308271603eafeaccb137e4d9dbd61a2877b7fc6912d571b47ea376b5574f4375de1b32a2eedd3a97000994527e5c20e21359f0cb5cc6a89eb2c5df5590cabea416604d4ee647bd18238d6e2b1459eb966fbfe672722bb983403f08501411a3d4f747bd551325c4510be44499249e44461b185e86fc733d2070d149bc665dcf455cd0fd97112ec2ace16350068ac31ad2f6dca03823a80b81b792e26afe96958c2df70ade4cf71db4a61fe4b3a51104d1ad6026e93166269c9473589deca41360a6539d567ca1be5684a6b49270ee19b8ee1a5dfe7465841739431ed8fd7f8a9b8fce9ea5d02f1780dfac1a868861eb05da94cfaf1914e0b48181a0fba1389dc4e6fcc849f511b0dcf61ac2a71598740fd9cc735b5438098ca523d2bf2dc1b72ebec37ce41e0e83533cb3c93ba40a744e69aca4348928ea7bc9ec8fcb2dbd85017f6f9941c36b82b5ba0e6cb347dc03c4c30480e67541d9041c050cd16962688761cdad8d08369f545b2a1182b75853df597e14ce5fa30812f41292ca93533c4e005aa4c192b6c8d5cb143d879affb25e754c3b6f15d4d604f0376d4743edd97828ab830faea95eec3a092d728c6109a94eaee6f9b60df7a457f32d3de6b960d0ac024ccd172a7e26eb0a7de33dbe0fb1ef0110961fb039ac65dc8902bfd332542d4e49f61d520d856c804bbea32b9a542b3781fe11b35f6980710c8f11da4e2ebc1ba31c5661244c769d748d27819197da63c4bb2c9822dca86a794811fe2df8112eaad0deb2e8318e9d4ff00d7b0b3c83142ee4761144db82fc971b3ad9c63914a9e1f52d72c5dee81fcbe22d7ff55a166e1a6c473ff2b7b026376048ea8c34463465bf955f0d8a3b00dee8a8838ae03e5e36c0627aeb1ef8d2df69d2fbce32fb8c2102ab993a091b88651027b33650a7f02600873a557a9aaa6ace5258a4c9bfc29b21b6d2ecfa915e6282a12f8348370f1ef63b672d9e2b435941832f3500f10b04f91f7b5e03889c8c51dc2aff7ce80a884940544aeff735c7e3400d036c82", 0xf72}, {&(0x7f0000000880)="90b9f79fecb3ad0dc00ca95fb148a3ba4355cee5ce27d2c10d8474464a37dea0c1ab2a961404f5aa5493cdadb4b6bf4131e96c0aef0f89065db2aa551c68ce3fa911638fd608ff9e30cce409b6e516e59c272cdbbb88c83dc61199d70f8f7e05d9639d278d53151a6720a51979ffd78dcc1a000929160435bd61e3f36c78b9bd5baef79be54e537dfc26029f52cfd5b4dd3416fc140fce45c077ab5ee206763130ccdaedd3bff9b7a20b6b02e558fddbaf1bff01a4e9c33db2", 0xb9}, {&(0x7f0000000a40)}], 0x3}}], 0x2, 0x11) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={0x0, 0x6f4}}, 0x0) 571.06783ms ago: executing program 2 (id=3042): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff56}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"}) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r1, 0xc04064aa, 0x0) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x20001) 570.578546ms ago: executing program 3 (id=3043): sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000001000)={0x2, 0x4c24, @remote}, 0x10, 0x0}, 0x48050) openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x802, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) sendmmsg(r0, &(0x7f0000000ec0)=[{{&(0x7f00000002c0)=@l2tp={0x2, 0x0, @private=0xa010100, 0x4}, 0x80, &(0x7f0000000340)=[{&(0x7f00000006c0)="cc5c84001214dbd9e5943aa8a315357330c56529d6b619a78687eea13ea02981afbb0fab70e8c3ab037cd82bd48f4947702a177974e7eff5f2ccdec909645f69e3dea5153157374459f6a21ba8609552d9ada54e81b0f19b55b77cf382ad22", 0x5f}, {&(0x7f0000001400)="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", 0xbd0}], 0x2}}, {{0x0, 0x0, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000880)}, {&(0x7f0000000a40)}], 0x3}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000640)="5506b6", 0x3}], 0x1}}], 0x3, 0x11) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_open_dev$usbfs(&(0x7f0000000880), 0x5, 0x238000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff08"], 0x6f4}, 0x1, 0x0, 0x0, 0x2}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) 480.702403ms ago: executing program 4 (id=3044): sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000001000)={0x2, 0x4c24, @remote}, 0x10, 0x0}, 0x48050) openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x802, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) sendmmsg(r0, &(0x7f0000000ec0)=[{{&(0x7f00000002c0)=@l2tp={0x2, 0x0, @private=0xa010100, 0x4}, 0x80, &(0x7f0000000340)=[{&(0x7f00000006c0)="cc5c84001214dbd9e5943aa8a315357330c56529d6b619a78687eea13ea02981afbb0fab70e8c3ab037cd82bd48f4947702a177974e7eff5f2ccdec909645f69e3dea5153157374459f6a21ba8609552d9ada54e81b0f19b55b77cf382ad229baa9decce1ea639a300f1fa65b945a0e29d36cb8ed369e91698c0e9ff3fea437d95cb3096af980c02d7c228cc0fcd139de0c5787c6a09f430de0c391e8d48f4601f42e50c3247201ff179e204923a8d4c6d57af9f48b8069be567e24c90", 0xbd}, {&(0x7f00000007c0)="a960e57530b65741465209e7c6235055450b1ed3da8592b928d8e20971659d8e3ca392643af5fa7ae0e3455099a5f7b857afa34cbf9962bdc9db46a15e7dcf9412a2b98b6ae75ca1bd7eae82d94855e9ced28430f77527b7c0b999ea", 0x5c}, {&(0x7f0000001400)="9af390e2aadb61017e08249a2485ad46a590a90910858e1ceefc66db2ed8f32bf6be0e2f94e7e4db6454393a128402ed26580c7c5ebc85db639da17c927c23dbde640ab030889e8b61f26d270bc73b21c9ac8ba542e6b4ad2cd147059128ba038e4b9ebb20537f437b23b46ec790720e1fb74cef3c677e9978662a84cf2fcf73c73a5e763358496737af6284226bad34fb9083f87d853ab78c816cf32c90bd5c40ff6446214552d29745d34e0c4bfa623d00e5cbb393972371503122a0f44135db5654ace67cddb85a12df91fcf994fc680afe5d34268b23447589ef3f5383d152bf6dd104984297180f896ec8b1ba50952c5ab76e144f5636692d7cf17922c9b447ed6d59553ec6085e07413034875c1ae0947280e1a6f0d5e7f23b32e56ead8590d3269fdcb624cc870968b2f100bf3bc3d2ab105a5f61456d4969181fbd207b6f4d6d9ca0a1920daabec06d0c5e276d18f2571e88373dd41af9080d72aa88b10f8900b48acb61a61007dd4dd0e9240af5382a26f68bd706a83d8df76a4a5d02b39d07f97c4f86dad9e14eb957cc4be52b027a462262589929e3d035188dd9f0561e3ba2de6bafe743d9ae397e9aa423644fba8b2d6425ac1cd78c76e52e04d3a29e74075625fb5e674bab02843991ce804e0d04961f2978f3749c5ad83f355ae5da936fd6e0178d2bd12aacbe0205aa9a15579fd61d738f8d36412e814ba500edaf28ea68b0e96fb1839acf8416d8f5df7fad3b663f68e2ee5784fd01c7021130a490e629b1348acf3479e0392ecabbeeb18ec421c26e76f6f5c480e7decc85a0583a56180f199d26090b10ee5057ec4c1e04be948a5960acda014d646cf91bfdfb9d327f8ab545f8b41e8dbab94f195b189a8642a6b95e0ceb36b640fbdfe21925cc110bd2ef2c3fe24f12f95771b60e2ffbc47e58b2237b5574cadc32aab0f0db3202e4adc44a0651ef97703957857cfb6022578c97802f486bd7f48129f0c120700d0b70e048618a9f1de9f34dbb1f92dadc86f09e6288eb1bdbd1f700cc2df781654dfd57d9da779607080d3bc6dede5818aa8d6c99fa1ffdbb6a1a43040fe1379cf2a8b4b862db428c29e388a6e6b863bc818c2139a0d4238f10baf22f498b6629181f997ac280547e92fe300d0f8dd8b6724df5aa14be73cd630b808a29bfb52707b8db7d0065bd753b3773f8df58c74ea56f4582caa2fa8532b8049fd9ba775afc5b92b767ed0b35d4c086d9af6f7b7ed96f5f9d3734e703fc683fe0ed82b7763c67734067759e27b60036a3b4c53526716c175d75a9fa6ed019d3e1047bcb9c6510665de23cc2802804a0c3a347faba392282df430e5e6141f9eb660f7cb0eaedb832a7880c953bc0188c1f28eb466799e2768886ef81096847f50159278b572b0cca7744d6a572a81ddd2bcea73da3c8a59680bcaaadaf95e1fe91e41a8036835975b072a9587c560e3da854c96c64011755d08fef5228bb2db62a445bc0b9e17dea88854cd6a7c8a288727d5690fc4941978dee5eda2dbdc85915e7a2fdae978adb217b3f6b31cf69b51b9f805f8b447a4868b442933fc0e03860a7084230ff8fdff70665717f9c0bade31f87f5de99643e800feceb0dfdd6d1b67d4056a52f0efa2ed2b1142132c6242d917b46d939aade6a362bf586058385d7fcef1b4e358a093d6781b9e9bf280520ff083a6026bf701237e38927ed21209dbf407a7944ef687b93619b181b9112477fa902f391a7163f93bec2d6369ffba644f4fd5139890fb66bd6017a61d9fd043154eb0ab0de3046cdb8a182a553cece0701a922518cf09cd1ab421ee8ec677a8d453cd8c21bdaa5f8dd804dfe80fffec8c4d778d5e260b65a2f0d3c1b09e9d6bd1f3746aa7fe07374a028a89fc96eb66affbcddfaa01a72058566e33af88e37f43fbba73c0423d54079fad54c136ec5fcd61d5134f833ab44f6cfbc2348871f190ac4c4bc20c97fcb29f4823a8e3bf76f85b10dfd33df0001646a7e0b2ee3e14455f6c8f225b80eed457e772cb2504ded46a24e911428decff4a130be797b6530c33ec1be7b0dd4df6206eca1c4c8dfda776336bcb876d80043195de773fbcf0d3abe53e9a38da0af7a6598815a71ffc937203f5a04e87eb532e579d66d42b06b791b6ebd50e7855f6645d29434bb0280fdf1511b163b12838f39ca864516711501bbe345d46b34ab2f0d8317d45376f73e302a90f5c362b18e1840668a9f27e90f2b715b4b6ae7a6dc387583110a42fd4977635275f7244a1912d0c67cf53d5da8a384839020d71db234fcc4388a735275763f01b2b4967e99f551e489bcc28f693a1e688ac8c39a971f8ae9d973cc7adac4a642a7a84ecca2d0bd24c300b94dff82fa4f95c1ce5fdb9128466443cb8442048e53cd46334d59774de0e2ceefcd4cd2e6c9da7cdc2162346111f7da236d72f33d509d73133951e1a3f84fa7e767cf56fc9bfb3986c5ec501634b92a780f63e0ee61e3d25f51c39b975ea587027a101059e9386f1eaaaab8ebfd5c453e9f86c851f9c78e4e06184f04fa9a54ba0bba5d18108c2973f50cb626eca6e3d5b2907b00d2ad4fff9546482815291bd220fa31c1d1a735562174644fe06131e31ce66064fa6a02d5bda756994f81163b97e854274183bbc4ddeb9bb823944afc3e07caf510732df2835fd11de82cb318b88f4d385adb57ac73ffe7f3d1e387848766e11000c94123f2a7d33a93d3b030ebb1206f26221a1ceef44a708693796ab80add7d9b6907c653c6becc21d49c380b3fea419276a387ad482fc3614fa7cac6ea9d07dffc85c1d3f01f57aa9816f32e3237b05d191c3f3d2ed31c313346176d18dc53307afc3aea306a5b44189b6fce062cd21319f1c0a5cf3bc84aaff275491d5fa26d12173e134bdb776478c27502dd4786cc079b6eb00d05f1c8c27a2e326ef11ad1866529b60e6a9e9ae776f01071e364a4604dfe79fbdfc9828628e50940398cc6b925ea8806ee3bbd22129c5d37551eb5e1ef613b027aebce0a83963888396f3e7c953e5416b522fd3a0660fefaea0fc97ca7d82191e2e8f23ca2aa56e8b9de2e1d3e093b8c3f4d7e700b7193b3d83c5b6bb1e7ff2a1c574c9d15ad79631573e41d46653601c510ec7cd0d6125c8e600ebb41247988c28305ac47eead817fecf4460c2221a399134d1d11363401090691a7bf1f58f27a09311d6591cef3d879570667e9e10eebf7df32ec9417f0132be9f1485b167b58b0bf88e31fb2d3957fa05a4d3f191c1d1caa189fc0c11c04287ceaee39a147aced6e3e9c2fe8f51a9823401ad4bf92b0fd4070aae1fe886b8c160a0d2a1507259e58c5608654f05f444877bf9ec215933d6f0a89a3f6199a23c535d8cf9541f2eb970261b12325884fe64330f67a8b07748522c58e5096a04afc67f08b4b0b3da2c9e010b8f079fabdbd187b3d1f69b9f8110e0ec3a488aa8b8563745f7e9fdc1faeaf542858f417d3a75d416e8f55c46cd962d9ac96ce8b56f7a0e22350d2b9e8a537780edddd519fd43baec4834aa6abb0b8c4007dfbb9dac74bf3802108966bf7d5a2999d16110ad0d2cab1c72c2d0ddce14e5043ee62fe9b722355dd2b7e728a589da59ef46dae95f1b89c22d5487a855bc1ee5f9d1427f643e2fa8748e07e6b51e365ab5e23e32401acc229c09f56868532ca611fa678b13f7f580392aee230878817f9dadc9b071245f75b7f626ab6f3342e8d80c3735e3a37646dfddeddec617fd3c155bb0735dd74eb1b71b957645978638f6bab555681b1e0047f7ccf370051f8fd42b171d16291a79ab5aad78940d12129d4de9f1d0a17f539fe333c7e3af31703dd147044ab4efd666cda9942c14cb25fae13cdb497bf7d71094192765df81234cf3dc9d38cdf373a06f5b723ab987708c8ed1b1b7c14cf55663298e752621be837d9e8f806552e0d605515dc0346354c76536d7681bac9dce48479abf18fc8b45862471ce1d75957a23c6bee5b2eb0022d557b6ad6153124e4594d26cc4a6e70de89086e0365039d215c2d9c7d881766b564b58be42104b4a4cad074eb1600be3a98fd7e19296066ee8a8d141d1b9f070c06c58c4f6e5c73b43022f39a13e701220064ceac7951818b1a88f68b2241efc57d37f224161533c75e279500896058aa03ce9571567172b57dbd40e1e14f8068cec77cde8da6aebf54039de9c7251289192616dca9d90bcc3ca24708dde9309d00d9a61c7be33f5858729ca3726fd8e8fdf911e58d3908797ec7b53cec", 0xbd0}], 0x3}}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000880)}, {&(0x7f0000000a40)}], 0x2}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000640)="5506b6", 0x3}], 0x1}}], 0x3, 0x11) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}, 0x1, 0x0, 0x0, 0x2}, 0x0) 480.437138ms ago: executing program 3 (id=3045): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x20000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000240)={0x7, 0x1, 0xa0008000}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0xb, 0x100}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x2, 0x5, 0x3}) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000340)={0xda2, 0x5, 0x7}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000340)={0x3, 0xc, 0x7}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x49, 0x7fff, 0x4}) close_range(r0, 0xffffffffffffffff, 0x1f00) 407.328022ms ago: executing program 4 (id=3046): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x802, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a050400000000000000000200000088000480340001800c0001007061796c6f6164002400028008000340000000000800024000000000080001400000001008000440000000022c0001800e000100696d6d6564696174650000001800028008000140000000140c000280050001002d00000024000180090001006d6574610000000014000280080001400000001408000240000000db0900010073797a30000000000900020073797a32"], 0xdc}}, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x3}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000080)=@ethtool_ringparam={0x11}}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r5, 0x8b1b, &(0x7f0000000040)) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x5, 0x1ff000, 0x81, 0x7f, 0x1}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, &(0x7f00000004c0)=""/187, 0x0, 0x0, 0xc16, r6}, 0x38) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77682a85, 0x1100}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r4, 0xc018620c, &(0x7f0000000240)={0x1}) 407.012575ms ago: executing program 3 (id=3047): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRES8=r0], 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000030000000008001e0001"], 0x24}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB="64000000100037040000004dcb6a140000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000440012800e00010069703665727370616e00000030000280140006002001000000000000000000000000000214000700fc02000000000000000000000000000004001200"], 0x64}}, 0x0) 306.619873ms ago: executing program 3 (id=3048): read$FUSE(0xffffffffffffffff, &(0x7f0000000340)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r1 = syz_open_procfs(r0, &(0x7f0000000100)='net/ip_vs_stats\x00') pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f00000005c0)='fd', 0x0, r2) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000480)=[{0x6, 0x0, 0x0, 0x4}]}) msgget$private(0x0, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r6, &(0x7f0000000300)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000000)='batadv_slave_1\x00', 0x10) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r6, 0x4008941a, &(0x7f00000000c0)) r7 = socket$inet(0x2, 0x801, 0x0) bind$inet(r7, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r7, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e22, @local}, 0x10) openat$cgroup(r1, &(0x7f0000000140)='syz0\x00', 0x200002, 0x0) shutdown(r7, 0x1) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) 306.128397ms ago: executing program 4 (id=3049): r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/icmp\x00') r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e23, 0x1000, @empty}, 0x1c) pread64(r0, &(0x7f0000000940)=""/239, 0xef, 0x8) socket$inet6_icmp(0xa, 0x2, 0x3a) 305.550566ms ago: executing program 2 (id=3050): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000280)={0x80, 0x400000b4, 0x0, 0x0}) r2 = accept$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000040)=0x14) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r2, 0x8008f513, &(0x7f00000000c0)) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 301.488743ms ago: executing program 4 (id=3051): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002b00)=[{{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000000180)="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", 0x195}], 0x1}}], 0x1, 0x10) socket$kcm(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x75b08000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) socket$inet(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x5, 0x3800, 0x7, 0x11}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r3 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0xfffc, 0x0, 0xa}, {0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x10}}, 0x0) 398.892µs ago: executing program 2 (id=3052): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x802, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) sendmmsg(r0, &(0x7f0000000ec0)=[{{&(0x7f00000002c0)=@l2tp={0x2, 0x0, @private=0xa010100, 0x4}, 0x80, &(0x7f0000000340)=[{0x0}, {&(0x7f00000007c0)="a960e57530b65741465209e7c6235055450b1ed3da8592b928d8e20971659d8e3ca392643af5fa7ae0e3455099a5f7b857afa34cbf9962bdc9db46a15e7dcf9412a2b98b6ae75ca1bd7eae82d94855e9ced28430f77527b7c0b9", 0x5a}], 0x2}}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000003880)="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", 0xf72}, {&(0x7f0000000880)="90b9f79fecb3ad0dc00ca95fb148a3ba4355cee5ce27d2c10d8474464a37dea0c1ab2a961404f5aa5493cdadb4b6bf4131e96c0aef0f89065db2aa551c68ce3fa911638fd608ff9e30cce409b6e516e59c272cdbbb88c83dc61199d70f8f7e05d9639d278d53151a6720a51979ffd78dcc1a000929160435bd61e3f36c78b9bd5baef79be54e537dfc26029f52cfd5b4dd3416fc140fce45c077ab5ee206763130ccdaedd3bff9b7a20b6b02e558fddbaf1bff01a4e9c33db2", 0xb9}, {&(0x7f0000000a40)}], 0x3}}], 0x2, 0x11) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[], 0x6f4}}, 0x0) 0s ago: executing program 2 (id=3053): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000001ec0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000000580)="c4e5", 0x2}], 0x1, &(0x7f00000019c0)=ANY=[], 0x108}}], 0x2, 0xc8040) sendmmsg(r2, &(0x7f0000002880)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000300)='V', 0x1}], 0x1}}], 0x1, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x10}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x6, 0x10, &(0x7f0000000e40)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000300000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b704000008000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000001c0)='X\x00', 0x2}], 0x1) r6 = getpid() r7 = syz_pidfd_open(r6, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="791298000000000061138c0000000000bf2000000000000015000000080063033d030100000000009500003a000000006916000000000000bf6700000000000066060500fcff03006706000002000000760300000ee60060bf050000000000003c650000000000006507f9ff01000000070700004cdfffff1e75040000000000bf54000000000000070400000400f9ffad43010000000000d5000000000000000500000000000000950000000000000032410000000000000054bb12dc8c27df8ecfc7bdd2d17f2f1754558f22dd399703d6c4f6f3be0b369289aa6812b8e007e733a9a4f16d0a3e1282ee45a010fb94fe9de56c9d8a814261bdb94a05000000c6c60bf7a13ba1fcf1111ce4fc0d742a81762bab8395fa64810b5b40d893ea8fe0ffffff7f1b546cad3f1d5af65706fd4f68795cce6cf16ab689b555202da2e0ec2871a51445dc8da39e5b0ab71ca9b901627b562ed84b026002d4519af619e3cca4d69e0dee080006774a8f3e691700ec88158f02001b0000c81c8b297dff0445a13d0045fb3cda32a673a6bb55d8c80800dce431e56723888fb126a1403d2b63f16fb2ad9bc117aba7cbebe174aba210d739a018f9bbec63222d20cedbc4d03723f1c932b3a6aa57f1ad2e99e0e67a993716d20000009f0f53acbb40b401e3738270b3156268784f2af9e4bcf8b07a10d6735154be1602f9dd1d7d4301e00000000000460bcc5989ec85e3cbcb6bcfaf0000000000000000bc00f674629709e7e78f4ddc211bc3ebf0bd9d42ca019dd5d0861cd64722cf74686ebfbe2562671cd47840f81d2a8f8f9be3bcd19dc6840aa7afaab43176e65ec1118d50d1e80100008000000000887a5ad103649afa17690884f800031e03a6d1bb96589a7eab049b1bd47287cd31cc43ea0ffb567b40407d000000000000000000000000005f37d83f84e98a523d80bd0d0d703f37ca363f601ae899a56715a0a62a26a0f6a5480a55c22fe394ae0000000000000000000000000000437d57defb79ea000500000000000000000000f014a4a318ba48d35ae9f438000000000000db894b62a614cb1fdd46619c5d2200000000000700000000000000000000006dcd2f421400f69947e4f26e099c9e8369080663c909b7e7c87e3b5e8e5a6df77c8f7338cd5a85f211a41b5d529d4243e47d7ab0d5991756b59d363ba30b18fc2ff189a4e8db38ab97c6a125e2785619e84c6a2b50f0e3ff83ef5149aff43dc899fdebdc2c496e6bdd4dd4d21f06fe133f4444272c5f0839ad663100452a6c6b6421f7e89a33b339401eee2cd466ab2a93a1ee7fb8a9e455ba1c6e17b02a1cd7bf35d36cf5b2a0f063469ae0d0b9fc042b48e98626eb0f9754d8cbbefa3079fe63063047baff09e9aaf7600000fba9a88db9ebef86f7cb522a784bb6d37e5f802757a15c6735138b493db9df53440a63fc565a0b190a710ae1e6807cbeb415ac841e94b706974160a60a14e571274f333d23186143b95514c79b50994cb39cda343bda8f01cf8ec7cdfdace0289e83ce50a57d69bfecfaf69fe7ff5b0375a47d3eb57b41d8a0589b82a1cf1149ba3f21ea2b65433321eb1a6f04ecc713c2b26d27baa49e54c2babec86335b9f418b5a5eb997bc9dd65197124b9aa80fc4aa8defb986bf05c41b919886bb81ecd3d24cf9ecc7004000000000000002c70d32f5d55ef2a2cf7560cb2884f46a92b3c25550f73e407fc5d514b2b7a6b690e290e676266addb7d96e723dec9c418eec8c48dffb6f432b4d5fef16e4f0051ba7efc690022c3f62b37cb5682d8bfdfc637ad3bf089ef0117bcd395322fcfb8e8e0a6e2babceb5f289b1d991770681192bcd0b584c3497e455f30ab918a690514a87a7d8e1d5f169a4e680e9c390071d26f2e0e26fc062f2785f14c0404fe01fb4000000000000000577dcb1698a9021a36d73ed03651c1937b2c84046023a1a0a87b208e33ad2d7c2892b176877264e1d699b7401eb917b289f6f67060fda0fa44b54bd87517a2bf09dba7209e41db4288b61bda5960952c45e5c55f2cd68bf9c6ff33e46109584bf42e8696ef1876564fef6f24cbbed0db8ab7fda1ffcc8c9fd4ab2cbe8f8df8e5535b12a942a948eacdaf308d48932064cfc3329da74f6f3e4409d6764a29680e312bf1a0143180e6493c9201ea916e6c9b2566c558ad88d9f7c0aebf82f5807eecefa97ada9bbd9e478e5d7748ee188bc719ca7a73dce5b6758a767c4c6b7572ab25eb2d73986379d5685cb438fe7091d097cc8f33fc0f83dee76603d6580f1c8fc4c37efd305ccc5a25678180425718bb9344e60dda8dae2677bb602d29aa0810616a2fdbca7020d72291b592b84223e2522ee01f5bdaa0fc4eb8d71d948a2baccf3ea2aa79d4d9069d8c0000000000000000000000321cd67859b4567badee56f158406f08683bdc5ffe2dedc916000c71f922fa2dfead7535999436a4aeb908781893479319b8b55e00d90ae6f09f06be2a0fc0bc17bef53331208112a0132350c0c5dd4607547079acc9471300dea6ae01742dccdae69f932cef80bca1bfcb57b9c852cf8358a580044772a80f20de36f707385380155be8907029d039a1d1447fc06b7020221e0d439f3f47edcf12f913dc8b6389a540340ae37804728ea65352e630c2e90424d58d72fdc1b28403e1dc7aad238b81df3b2d4166d656c6a9c73554bdf4f7312a4c0271e0eb45b4a596b7fa928ac3683f09fdaca46226c1df2c6c866cb4412d17d3d52c38cf0f7bd3b0eea2d4e06d061bb1b7c8c52f37f4036932d00028abd4527f5649bd60df638596fd639d7b16860033754ab13419429e5e39f290751ab6bd9392aef5519cd8c16e1f1cb1f225cc84a1a62497c1e436142fe28048a2b4d133905814a1808bc5b3e45eaa9eaebd946bee806968aeeb5a9eed87eba3d25d0b412a1b4cf2d419a58b09fc275c4395a0bd332eb538321465043e5967dd22459d0f52190a37f93ab823431a81fa6f54de61637fd473e19a6f567fead100e7d8cac149b66ebe9973af846146c62065a64854ed21e8b6f6fbe78474b753915a42efcb7da8ad18bacff8d69e0af1ca1f8174530a21820738412b100b54ee9b4a0dc22d5fe1cadecaea73fbfad087b19ce53177488d230539c5174f572a539d9d7c42698aa82bccf030ad393f25c10baa17e919f647d0e31877b7a6c1d8d86583f884a0c1da07b9b6dced06cdeb0094aa635a82f233b5993926b8970a0840ba116a7d20a40efb3bd03c4bdf380a2510a0a1ea69811ded68943c71218b42783b38959753978f222e1396b9b36dee2ce205122a000577cab29f48bff4f88c417e6bf5fb430d925596f29aca8677ca5a113aeaa5e0252ca17244d6c76e78ff1bbd81a71c4dfc72431d7f1126f8bdbf4056ee0f58a1bf83d53b1de07489541182dc4ee0f573c25b6c15dad930bc7a770b5a4f407d7a879db7185f15f80100000000000000739cc97db66ec6b925955d9a591808947fdd8d484ad27353230a449fdf87fc46c73b852fec931cfb6718acf3315bf5e577d00beb77c5514bc05d576a81345a03ad7aae74c5d2b77d45718348aed4fcbcd1441ff31b8f038824a989a9446a4a69367b228b3d174230b7320fc4d3c03368db573816dd0c04e65d6f8ce48283e76abdddbb965e0b2568e93c9cc5494a55421793f562c50c53f876cbde93c5cc7a3099c99d9775af010ba093f8a13b771782a3cfb24fbde6ef763e20c613164ab014d1906c4e098f1431b6b2886a155c4bac2911d7ee6a646f5913205ebd175e68975b93c330e4f9131788026b3b7cd5b6452c9e17452ac70000000000000000000000c71185f72436640fd4294fc3da230f9065095be47d7a848df12316c3c8b184fe110b061987fd79cf7d83443e69d08e2e839ae4fbe26ef7764f4870ef3bd0ec12eb45f60ca10dbfe329271f0bc93b28798e982e0dd32fc14bd4313c63b2dbb568f33fb45acad2dc7f438ea162c0709c0bbe1ea13e1e47399286e8143f400d7adf5f69e455706626814ee49274667f47769293451fd49885a152b8d2cf18febc7993f4a93893c6c7b7e46a230359ef2443e6bb9f50bb0faa5eaafd3ed6d551600c46b58a29fd7ccbbb0616f0be27302b683eccd742791d97f4a1daa0447f004426fd09b67d926f51525da63987bc73af35b28277879089b89fff6edab2fa1caf660a46a1a9f09e2d095b1c4be95c7c33dc81857f580e36c0a78d94dd879ee18de4a6475858d2ded2e3427ae007cc6f8e5e99aa146667f71ad83f3ddcf5db2dc396d7da499b65cd98125f20c284fc84d6a70be1de44b49c82022225292199c75cc26beab98dce4c331ed722f01d0d6314a72416814a565f4d90a5f8a255810f23541082f4b06f451e4724cd882f4d589600000000005854ca490d7df9cc293547c9a51aecc7a92f417f6a4d327737f1b198252358832dbe43507844a0cc112af4ce457c173fa64174ffd5ab9501eeb85508ebb60e169c0736c5960f2fe08735d6a7aa7c1f4a6433e77d3e547bbe6cf5b5d93a491ab4bba1ea7a1e6f37618b1d74cff3630d85a210092211be1ec12a30891eef590b19cdde055d626818c64e1c56b8918f33441a64b54946571b7bc70fb065d3bb1647f6f989ab8159e6d1cfa6c0ec7329d7d2263ca22144bf17d8692f03b592bd0f610096094da096233984e95b9a8216a6e60a104ae0bb5f77ac70b4390ea2cb6f6c40c928fae489f447240a25fd0a5bd9d5b6cd2a98f8804862922c11229c4e45c765e4d3348af3d3aadd5cc24b39437f1ea2df0000000000000000000000000022b90d93a267f3af4e02606f0ce6c2ffc404b575a09d6e625f3248689005eb4a9c8df3c67e6b2b759cab3a7bedf1b927cd8ba6d13b3e7d7279515e3d6d20"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) open_by_handle_at(r7, &(0x7f0000000180)=ANY=[@ANYBLOB="15000000fe00"], 0x1) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000001100)={0x1, 'wlan1\x00', 0x2}, 0x18) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001280)={@map=r4, 0x15, 0x0, 0x3, &(0x7f0000001140)=[0x0], 0x1, 0x0, &(0x7f00000011c0)=[0x0, 0x0], &(0x7f0000001200)=[0x0], &(0x7f0000001240)=[0x0]}, 0x40) r9 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r9, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=r10, 0x4) r11 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000001dc0), 0x60200, 0x0) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r11, 0x8008f511, &(0x7f0000001e00)) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r5, r1, 0x25, 0x0, @val=@target_btf_id=r10}, 0x14) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000013c0)={r8, &(0x7f0000001180)="4c2e2f387761a3c918729db4d7fb8db944dc03066934a3d0ad8cfbafba180c37fccbdc017467a2a8ead711d500eaf3f6fc4159d73a079b060554f31220", &(0x7f0000001300)=""/141}, 0x20) syz_emit_ethernet(0xd81, &(0x7f0000000040)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x17}, @void, {@ipv6={0x86dd, @tcp={0x6, 0x6, "9415d9", 0xd4b, 0x6, 0x1, @dev={0xfe, 0x80, '\x00', 0x2c}, @empty, {[], {{0x4e20, 0x4e24, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x0, 0x101, 0x0, 0x8}, {"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"}}}}}}}, 0x0) r12 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r12, &(0x7f0000000200)={0xa, 0x4e21, 0x3, @empty, 0xfffffffe}, 0x1c) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001040)={0x6, 0x15, &(0x7f0000000ec0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xad}, [@map_fd={0x18, 0xdcb04117263ff7d2, 0x1, 0x0, r4}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4116}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x3}, @jmp={0x5, 0x0, 0xc, 0x1, 0x8, 0x40, 0x10}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x80000000}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @map_fd={0x18, 0x1, 0x1, 0x0, r4}, @exit]}, &(0x7f0000000e00)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000f80)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000fc0)={0x0, 0x3, 0x4, 0x341}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f0000001000)=[{0x3, 0x3, 0x2, 0xa}, {0x4, 0x4, 0x4, 0xc}], 0x10, 0x3}, 0x94) kernel console output (not intermixed with test programs): mpol' [ 243.101905][T12323] netlink: 'syz.2.2373': attribute type 1 has an invalid length. [ 243.106366][T12323] netlink: 'syz.2.2373': attribute type 2 has an invalid length. [ 243.134159][T12323] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2373'. [ 243.671909][T12335] binder: 12334:12335 ioctl c0306201 200000000540 returned -22 [ 243.728229][T12336] binder: 12334:12336 ioctl c0306201 200000000640 returned -22 [ 243.912107][ T40] audit: type=1400 audit(2000000037.469:522): avc: denied { write } for pid=12341 comm="syz.4.2381" path="socket:[38809]" dev="sockfs" ino=38809 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 243.986892][T12350] netlink: 'syz.4.2384': attribute type 5 has an invalid length. [ 244.107553][T12357] FAULT_INJECTION: forcing a failure. [ 244.107553][T12357] name failslab, interval 1, probability 0, space 0, times 0 [ 244.114362][T12357] CPU: 0 UID: 0 PID: 12357 Comm: syz.3.2386 Not tainted syzkaller #0 PREEMPT(full) [ 244.114396][T12357] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 244.114411][T12357] Call Trace: [ 244.114419][T12357] [ 244.114429][T12357] dump_stack_lvl+0x16c/0x1f0 [ 244.114459][T12357] should_fail_ex+0x512/0x640 [ 244.114485][T12357] ? __kmalloc_noprof+0xca/0x880 [ 244.114518][T12357] should_failslab+0xc2/0x120 [ 244.114543][T12357] __kmalloc_noprof+0xdd/0x880 [ 244.114575][T12357] ? __lock_acquire+0x62e/0x1ce0 [ 244.114599][T12357] ? ieee80211_alloc_chanctx+0xa1/0x570 [ 244.114643][T12357] ? ieee80211_alloc_chanctx+0xa1/0x570 [ 244.114677][T12357] ieee80211_alloc_chanctx+0xa1/0x570 [ 244.114711][T12357] ieee80211_link_reserve_chanctx+0xbb7/0x1070 [ 244.114744][T12357] ? __pfx_ieee80211_link_reserve_chanctx+0x10/0x10 [ 244.114782][T12357] ? __pfx___might_resched+0x10/0x10 [ 244.114823][T12357] __ieee80211_channel_switch+0xa3d/0x2930 [ 244.114858][T12357] ? __pfx___ieee80211_channel_switch+0x10/0x10 [ 244.114881][T12357] ? cfg80211_chandef_valid+0x25d/0x15f0 [ 244.114906][T12357] ? ieee80211_get_channel_khz+0x14a/0x1e0 [ 244.114943][T12357] ? cfg80211_chandef_dfs_required+0xe1/0x1040 [ 244.115000][T12357] nl80211_channel_switch+0xbfd/0x1020 [ 244.115028][T12357] ? __pfx_nl80211_channel_switch+0x10/0x10 [ 244.115049][T12357] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 244.115126][T12357] ? nl80211_pre_doit+0x1b0/0xb10 [ 244.115165][T12357] genl_family_rcv_msg_doit+0x209/0x2f0 [ 244.115201][T12357] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 244.115241][T12357] ? bpf_lsm_capable+0x9/0x10 [ 244.115269][T12357] ? security_capable+0x7e/0x260 [ 244.115304][T12357] ? ns_capable+0xd7/0x110 [ 244.115344][T12357] genl_rcv_msg+0x55c/0x800 [ 244.115379][T12357] ? __pfx_genl_rcv_msg+0x10/0x10 [ 244.115408][T12357] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 244.115440][T12357] ? __pfx_nl80211_channel_switch+0x10/0x10 [ 244.115462][T12357] ? __pfx_nl80211_post_doit+0x10/0x10 [ 244.115503][T12357] netlink_rcv_skb+0x155/0x420 [ 244.115532][T12357] ? __pfx_genl_rcv_msg+0x10/0x10 [ 244.115563][T12357] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 244.115601][T12357] ? netlink_deliver_tap+0x1ae/0xd30 [ 244.115635][T12357] genl_rcv+0x28/0x40 [ 244.115664][T12357] netlink_unicast+0x5aa/0x870 [ 244.115700][T12357] ? __pfx_netlink_unicast+0x10/0x10 [ 244.115741][T12357] netlink_sendmsg+0x8c8/0xdd0 [ 244.115772][T12357] ? __pfx_netlink_sendmsg+0x10/0x10 [ 244.115816][T12357] ____sys_sendmsg+0xa95/0xc70 [ 244.115850][T12357] ? copy_msghdr_from_user+0x10a/0x160 [ 244.115921][T12357] ? __pfx_____sys_sendmsg+0x10/0x10 [ 244.115966][T12357] ___sys_sendmsg+0x134/0x1d0 [ 244.115996][T12357] ? __pfx____sys_sendmsg+0x10/0x10 [ 244.116067][T12357] __sys_sendmsg+0x16d/0x220 [ 244.116112][T12357] ? __pfx___sys_sendmsg+0x10/0x10 [ 244.116157][T12357] do_syscall_64+0xcd/0x4e0 [ 244.116183][T12357] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.116206][T12357] RIP: 0033:0x7fc66f58eec9 [ 244.116227][T12357] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 244.116249][T12357] RSP: 002b:00007fc6703f9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 244.116272][T12357] RAX: ffffffffffffffda RBX: 00007fc66f7e5fa0 RCX: 00007fc66f58eec9 [ 244.116288][T12357] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 244.116301][T12357] RBP: 00007fc6703f9090 R08: 0000000000000000 R09: 0000000000000000 [ 244.116312][T12357] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 244.116324][T12357] R13: 00007fc66f7e6038 R14: 00007fc66f7e5fa0 R15: 00007ffdb72d1dd8 [ 244.116363][T12357] [ 244.658691][T12375] FAULT_INJECTION: forcing a failure. [ 244.658691][T12375] name failslab, interval 1, probability 0, space 0, times 0 [ 244.665324][T12375] CPU: 0 UID: 0 PID: 12375 Comm: syz.3.2393 Not tainted syzkaller #0 PREEMPT(full) [ 244.665353][T12375] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 244.665367][T12375] Call Trace: [ 244.665374][T12375] [ 244.665382][T12375] dump_stack_lvl+0x16c/0x1f0 [ 244.665408][T12375] should_fail_ex+0x512/0x640 [ 244.665435][T12375] should_failslab+0xc2/0x120 [ 244.665461][T12375] kmem_cache_alloc_noprof+0x75/0x6e0 [ 244.665494][T12375] ? skb_clone+0x190/0x3f0 [ 244.665534][T12375] ? skb_clone+0x190/0x3f0 [ 244.665556][T12375] skb_clone+0x190/0x3f0 [ 244.665582][T12375] netlink_deliver_tap+0xabd/0xd30 [ 244.665616][T12375] netlink_dump+0xa5f/0xd30 [ 244.665644][T12375] ? __pfx_netlink_dump+0x10/0x10 [ 244.665693][T12375] netlink_recvmsg+0x7dc/0xa90 [ 244.665721][T12375] ? __pfx_netlink_recvmsg+0x10/0x10 [ 244.665751][T12375] ? iovec_from_user+0xbb/0x140 [ 244.665786][T12375] ____sys_recvmsg+0x5f9/0x6b0 [ 244.665822][T12375] ? __pfx_____sys_recvmsg+0x10/0x10 [ 244.665860][T12375] ? kfree+0x252/0x6d0 [ 244.665888][T12375] ? __lock_acquire+0x62e/0x1ce0 [ 244.665917][T12375] ___sys_recvmsg+0x114/0x1a0 [ 244.665943][T12375] ? __pfx____sys_recvmsg+0x10/0x10 [ 244.665984][T12375] ? __pfx___might_resched+0x10/0x10 [ 244.666021][T12375] do_recvmmsg+0x2fe/0x750 [ 244.666050][T12375] ? __pfx_do_recvmmsg+0x10/0x10 [ 244.666082][T12375] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 244.666113][T12375] ? __fget_files+0x20e/0x3c0 [ 244.666144][T12375] __x64_sys_recvmmsg+0x22a/0x280 [ 244.666172][T12375] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 244.666207][T12375] do_syscall_64+0xcd/0x4e0 [ 244.666230][T12375] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.666251][T12375] RIP: 0033:0x7fc66f58eec9 [ 244.666269][T12375] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 244.666289][T12375] RSP: 002b:00007fc6703f9038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 244.666309][T12375] RAX: ffffffffffffffda RBX: 00007fc66f7e5fa0 RCX: 00007fc66f58eec9 [ 244.666323][T12375] RDX: 0000000000000008 RSI: 0000200000002c00 RDI: 0000000000000003 [ 244.666335][T12375] RBP: 00007fc6703f9090 R08: 0000000000000000 R09: 0000000000000000 [ 244.666347][T12375] R10: 0000000040010022 R11: 0000000000000246 R12: 0000000000000001 [ 244.666360][T12375] R13: 00007fc66f7e6038 R14: 00007fc66f7e5fa0 R15: 00007ffdb72d1dd8 [ 244.666388][T12375] [ 244.810887][T12377] binder: 12376:12377 ioctl c0306201 2000000000c0 returned -14 [ 244.823457][ T5963] Bluetooth: hci1: command 0x040f tx timeout [ 245.105786][T12389] binder: 12388:12389 ioctl c0306201 0 returned -14 [ 245.162149][T12392] binder: 12388:12392 ioctl c0306201 200000000640 returned -22 [ 245.203041][T12394] tmpfs: Unknown parameter 'grpquota_block_har' [ 245.304574][T12397] usb usb8: usbfs: process 12397 (syz.4.2403) did not claim interface 0 before use [ 245.308594][T12397] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 245.374189][ T40] audit: type=1400 audit(2000000038.939:523): avc: denied { read } for pid=12398 comm="syz.0.2404" laddr=ff02::1 lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 245.427831][ T40] audit: type=1400 audit(2000000038.989:524): avc: denied { accept } for pid=12398 comm="syz.0.2404" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 246.027480][T12414] tmpfs: Unknown parameter 'grpquota_block_har' [ 246.306673][ T40] audit: type=1400 audit(2000000039.869:525): avc: denied { getopt } for pid=12420 comm="syz.0.2414" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 246.349701][T12432] binder: 12431:12432 ioctl c018620c 200000000240 returned -22 [ 246.422858][T12440] binder: 12439:12440 ioctl c0306201 0 returned -14 [ 246.477197][T12444] binder: 12439:12444 ioctl c0306201 200000000640 returned -22 [ 246.893284][ T5963] Bluetooth: hci1: command 0x040f tx timeout [ 247.225220][T12500] FAULT_INJECTION: forcing a failure. [ 247.225220][T12500] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 247.232604][T12500] CPU: 0 UID: 0 PID: 12500 Comm: syz.3.2430 Not tainted syzkaller #0 PREEMPT(full) [ 247.232629][T12500] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 247.232640][T12500] Call Trace: [ 247.232646][T12500] [ 247.232653][T12500] dump_stack_lvl+0x16c/0x1f0 [ 247.232678][T12500] should_fail_ex+0x512/0x640 [ 247.232701][T12500] _copy_to_user+0x32/0xd0 [ 247.232724][T12500] simple_read_from_buffer+0xcb/0x170 [ 247.232756][T12500] proc_fail_nth_read+0x197/0x240 [ 247.232779][T12500] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 247.232802][T12500] ? rw_verify_area+0xcf/0x6c0 [ 247.232827][T12500] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 247.232849][T12500] vfs_read+0x1e1/0xcf0 [ 247.232870][T12500] ? __pfx___mutex_lock+0x10/0x10 [ 247.232907][T12500] ? __pfx_vfs_read+0x10/0x10 [ 247.232931][T12500] ? __fget_files+0x20e/0x3c0 [ 247.232959][T12500] ksys_read+0x12a/0x250 [ 247.232976][T12500] ? __pfx_ksys_read+0x10/0x10 [ 247.232995][T12500] ? fput+0x9b/0xd0 [ 247.233022][T12500] do_syscall_64+0xcd/0x4e0 [ 247.233041][T12500] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.233058][T12500] RIP: 0033:0x7fc66f58d8dc [ 247.233074][T12500] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 247.233090][T12500] RSP: 002b:00007fc6703f9030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 247.233107][T12500] RAX: ffffffffffffffda RBX: 00007fc66f7e5fa0 RCX: 00007fc66f58d8dc [ 247.233118][T12500] RDX: 000000000000000f RSI: 00007fc6703f90a0 RDI: 0000000000000004 [ 247.233129][T12500] RBP: 00007fc6703f9090 R08: 0000000000000000 R09: 0000000000000000 [ 247.233139][T12500] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 247.233148][T12500] R13: 00007fc66f7e6038 R14: 00007fc66f7e5fa0 R15: 00007ffdb72d1dd8 [ 247.233173][T12500] [ 247.349305][T12508] tmpfs: Unknown parameter 'grpquota_block_hardlim' [ 247.443084][ T24] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 247.604872][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 247.628547][ T24] usb 5-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 247.631914][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.636011][ T24] usb 5-1: Product: syz [ 247.637823][ T24] usb 5-1: Manufacturer: syz [ 247.640323][ T24] usb 5-1: SerialNumber: syz [ 247.680041][ T24] usb 5-1: config 0 descriptor?? [ 248.121606][ T24] dvb_usb_dtv5100 5-1:0.0: probe with driver dvb_usb_dtv5100 failed with error -71 [ 248.147644][ T24] usb 5-1: USB disconnect, device number 28 [ 248.380815][T12534] tmpfs: Unknown parameter 'grpquota_block_hardlim' [ 248.442679][ T40] audit: type=1400 audit(2000000041.999:526): avc: denied { write } for pid=12537 comm="syz.3.2446" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 248.443531][T12538] random: crng reseeded on system resumption [ 248.465924][ T40] audit: type=1400 audit(2000000041.999:527): avc: denied { open } for pid=12537 comm="syz.3.2446" path="/dev/snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 248.484479][T12539] FAULT_INJECTION: forcing a failure. [ 248.484479][T12539] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 248.484940][ T40] audit: type=1400 audit(2000000042.049:528): avc: denied { ioctl } for pid=12537 comm="syz.3.2446" path="/dev/snapshot" dev="devtmpfs" ino=98 ioctlcmd=0x330d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 248.490217][T12539] CPU: 1 UID: 0 PID: 12539 Comm: syz.4.2445 Not tainted syzkaller #0 PREEMPT(full) [ 248.490246][T12539] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 248.490258][T12539] Call Trace: [ 248.490267][T12539] [ 248.490275][T12539] dump_stack_lvl+0x16c/0x1f0 [ 248.490298][T12539] should_fail_ex+0x512/0x640 [ 248.490327][T12539] _copy_from_iter+0x29f/0x1720 [ 248.490349][T12539] ? _copy_from_iter+0x37e/0x1720 [ 248.490368][T12539] ? _copy_from_iter+0x15d/0x1720 [ 248.490388][T12539] ? __pfx__copy_from_iter+0x10/0x10 [ 248.490411][T12539] ? __pfx__copy_from_iter+0x10/0x10 [ 248.490430][T12539] ? _copy_from_iter+0x15d/0x1720 [ 248.490453][T12539] copy_page_from_iter+0xde/0x180 [ 248.490476][T12539] skb_copy_datagram_from_iter+0x2a0/0x740 [ 248.490504][T12539] tun_get_user+0x1850/0x3cc0 [ 248.490534][T12539] ? __pfx_tun_get_user+0x10/0x10 [ 248.490553][T12539] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 248.490583][T12539] ? find_held_lock+0x2b/0x80 [ 248.490609][T12539] ? tun_get+0x191/0x370 [ 248.490642][T12539] tun_chr_write_iter+0xdc/0x210 [ 248.490662][T12539] vfs_write+0x7d3/0x11d0 [ 248.490682][T12539] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 248.490703][T12539] ? __pfx_vfs_write+0x10/0x10 [ 248.490719][T12539] ? find_held_lock+0x2b/0x80 [ 248.490758][T12539] ksys_write+0x12a/0x250 [ 248.490775][T12539] ? __pfx_ksys_write+0x10/0x10 [ 248.490799][T12539] do_syscall_64+0xcd/0x4e0 [ 248.490819][T12539] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.490837][T12539] RIP: 0033:0x7f67edd8eec9 [ 248.490853][T12539] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 248.490871][T12539] RSP: 002b:00007f67eeced038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 248.490889][T12539] RAX: ffffffffffffffda RBX: 00007f67edfe6090 RCX: 00007f67edd8eec9 [ 248.490901][T12539] RDX: 000000000000ffdd RSI: 0000200000000280 RDI: 0000000000000004 [ 248.490912][T12539] RBP: 00007f67eeced090 R08: 0000000000000000 R09: 0000000000000000 [ 248.490922][T12539] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 248.490932][T12539] R13: 00007f67edfe6128 R14: 00007f67edfe6090 R15: 00007ffc4c4e4ea8 [ 248.490955][T12539] [ 248.652105][T12538] pim6reg: entered allmulticast mode [ 250.480731][T12561] FAULT_INJECTION: forcing a failure. [ 250.480731][T12561] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 250.488223][T12561] CPU: 3 UID: 0 PID: 12561 Comm: syz.3.2454 Not tainted syzkaller #0 PREEMPT(full) [ 250.488255][T12561] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 250.488269][T12561] Call Trace: [ 250.488276][T12561] [ 250.488285][T12561] dump_stack_lvl+0x16c/0x1f0 [ 250.488320][T12561] should_fail_ex+0x512/0x640 [ 250.488349][T12561] _copy_to_user+0x32/0xd0 [ 250.488378][T12561] binder_ioctl+0x24f6/0x71f0 [ 250.488419][T12561] ? tomoyo_path_number_perm+0x18d/0x580 [ 250.488465][T12561] ? __pfx_binder_ioctl+0x10/0x10 [ 250.488496][T12561] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 250.488530][T12561] ? do_vfs_ioctl+0x128/0x14f0 [ 250.488562][T12561] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 250.488595][T12561] ? __pfx_autoremove_wake_function+0x10/0x10 [ 250.488644][T12561] ? hook_file_ioctl_common+0x145/0x410 [ 250.488686][T12561] ? selinux_file_ioctl+0x180/0x270 [ 250.488730][T12561] ? selinux_file_ioctl+0xb4/0x270 [ 250.488755][T12561] ? __pfx_binder_ioctl+0x10/0x10 [ 250.488781][T12561] __x64_sys_ioctl+0x18e/0x210 [ 250.488815][T12561] do_syscall_64+0xcd/0x4e0 [ 250.488839][T12561] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.488859][T12561] RIP: 0033:0x7fc66f58eec9 [ 250.488878][T12561] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 250.488898][T12561] RSP: 002b:00007fc6703f9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 250.488919][T12561] RAX: ffffffffffffffda RBX: 00007fc66f7e5fa0 RCX: 00007fc66f58eec9 [ 250.488932][T12561] RDX: 00002000000000c0 RSI: 00000000c0306201 RDI: 0000000000000004 [ 250.488946][T12561] RBP: 00007fc6703f9090 R08: 0000000000000000 R09: 0000000000000000 [ 250.488959][T12561] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 250.488972][T12561] R13: 00007fc66f7e6038 R14: 00007fc66f7e5fa0 R15: 00007ffdb72d1dd8 [ 250.489003][T12561] [ 250.489371][T12561] binder: 12559:12561 ioctl c0306201 2000000000c0 returned -14 [ 250.672090][T12570] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 250.852964][ T29] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 251.003199][ T29] usb 7-1: Using ep0 maxpacket: 16 [ 251.009964][ T29] usb 7-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 251.015579][ T29] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.018863][ T29] usb 7-1: Product: syz [ 251.020939][ T29] usb 7-1: Manufacturer: syz [ 251.022870][ T29] usb 7-1: SerialNumber: syz [ 251.030498][ T29] usb 7-1: config 0 descriptor?? [ 251.052249][T12585] netlink: 'syz.3.2465': attribute type 12 has an invalid length. [ 251.405865][T12591] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 251.503478][ T29] dvb_usb_dtv5100 7-1:0.0: probe with driver dvb_usb_dtv5100 failed with error -71 [ 251.521504][ T29] usb 7-1: USB disconnect, device number 22 [ 251.759085][T12609] FAULT_INJECTION: forcing a failure. [ 251.759085][T12609] name failslab, interval 1, probability 0, space 0, times 0 [ 251.764517][T12609] CPU: 3 UID: 0 PID: 12609 Comm: syz.4.2476 Not tainted syzkaller #0 PREEMPT(full) [ 251.764534][T12609] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 251.764541][T12609] Call Trace: [ 251.764546][T12609] [ 251.764550][T12609] dump_stack_lvl+0x16c/0x1f0 [ 251.764565][T12609] should_fail_ex+0x512/0x640 [ 251.764578][T12609] ? fs_reclaim_acquire+0xae/0x150 [ 251.764593][T12609] should_failslab+0xc2/0x120 [ 251.764608][T12609] __kmalloc_noprof+0xdd/0x880 [ 251.764625][T12609] ? tomoyo_encode2+0x100/0x3e0 [ 251.764640][T12609] ? tomoyo_encode2+0x100/0x3e0 [ 251.764651][T12609] tomoyo_encode2+0x100/0x3e0 [ 251.764665][T12609] tomoyo_encode+0x29/0x50 [ 251.764676][T12609] tomoyo_realpath_from_path+0x18f/0x6e0 [ 251.764693][T12609] tomoyo_path_number_perm+0x245/0x580 [ 251.764710][T12609] ? tomoyo_path_number_perm+0x237/0x580 [ 251.764728][T12609] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 251.764746][T12609] ? find_held_lock+0x2b/0x80 [ 251.764775][T12609] ? find_held_lock+0x2b/0x80 [ 251.764789][T12609] ? hook_file_ioctl_common+0x145/0x410 [ 251.764807][T12609] ? __fget_files+0x20e/0x3c0 [ 251.764822][T12609] security_file_ioctl+0x9b/0x240 [ 251.764835][T12609] __x64_sys_ioctl+0xb7/0x210 [ 251.764853][T12609] do_syscall_64+0xcd/0x4e0 [ 251.764866][T12609] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.764877][T12609] RIP: 0033:0x7f67edd8eec9 [ 251.764887][T12609] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 251.764898][T12609] RSP: 002b:00007f67eed0e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 251.764909][T12609] RAX: ffffffffffffffda RBX: 00007f67edfe5fa0 RCX: 00007f67edd8eec9 [ 251.764917][T12609] RDX: 0000200000000080 RSI: 00000000c01c64ad RDI: 0000000000000004 [ 251.764923][T12609] RBP: 00007f67eed0e090 R08: 0000000000000000 R09: 0000000000000000 [ 251.764930][T12609] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 251.764936][T12609] R13: 00007f67edfe6038 R14: 00007f67edfe5fa0 R15: 00007ffc4c4e4ea8 [ 251.764950][T12609] [ 251.764962][T12609] ERROR: Out of memory at tomoyo_realpath_from_path. [ 251.823733][T12613] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 252.283047][ T53] usb 5-1: new low-speed USB device number 29 using dummy_hcd [ 252.319538][T12636] tap0: tun_chr_ioctl cmd 1074025675 [ 252.323568][T12636] tap0: persist enabled [ 252.326195][T12636] NILFS (nbd2): device size too small [ 252.335490][T12636] tap0: tun_chr_ioctl cmd 1074025675 [ 252.337407][T12639] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 252.339302][T12636] tap0: persist enabled [ 252.348534][T12636] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=65 sclass=netlink_tcpdiag_socket pid=12636 comm=syz.2.2488 [ 252.354748][T12636] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=43 sclass=netlink_tcpdiag_socket pid=12636 comm=syz.2.2488 [ 252.359727][T12636] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=50 sclass=netlink_tcpdiag_socket pid=12636 comm=syz.2.2488 [ 252.365581][T12636] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=29 sclass=netlink_tcpdiag_socket pid=12636 comm=syz.2.2488 [ 252.366944][ T40] audit: type=1326 audit(2000000045.929:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12631 comm="syz.4.2486" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67edd8eec9 code=0x7fc00000 [ 252.370334][T12636] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=37 sclass=netlink_tcpdiag_socket pid=12636 comm=syz.2.2488 [ 252.379063][ T40] audit: type=1400 audit(2000000045.929:530): avc: denied { create } for pid=12631 comm="syz.4.2486" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 252.391637][T12636] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=59 sclass=netlink_tcpdiag_socket pid=12636 comm=syz.2.2488 [ 252.396112][T12636] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=12636 comm=syz.2.2488 [ 252.417952][ T40] audit: type=1800 audit(2000000045.979:531): pid=12646 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.2491" name="bus" dev="overlay" ino=346 res=0 errno=0 [ 252.434227][ T53] usb 5-1: config 0 has no interfaces? [ 252.436317][ T53] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 252.439837][ T53] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.448615][ T53] usb 5-1: config 0 descriptor?? [ 252.456518][ T40] audit: type=1400 audit(2000000046.019:532): avc: denied { mounton } for pid=12647 comm="syz.2.2492" path="/112/file0" dev="9p" ino=72351839 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 252.665309][T12626] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 252.668652][T12626] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 252.672050][ T24] usb 5-1: USB disconnect, device number 29 [ 252.947274][T12664] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 252.991178][ T40] audit: type=1400 audit(2000000046.549:533): avc: denied { append } for pid=12665 comm="syz.2.2499" name="hpet" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 252.997357][T12666] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 253.000966][ T40] audit: type=1400 audit(2000000046.549:534): avc: denied { map } for pid=12665 comm="syz.2.2499" path="/dev/hpet" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 253.004137][T12666] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 253.015577][ T40] audit: type=1400 audit(2000000046.559:535): avc: denied { execute } for pid=12665 comm="syz.2.2499" path="/dev/hpet" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 253.024501][ T40] audit: type=1326 audit(2000000046.579:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12631 comm="syz.4.2486" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f67edd8eec9 code=0x7fc00000 [ 253.028502][T12666] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 253.038270][ T40] audit: type=1326 audit(2000000046.579:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12631 comm="syz.4.2486" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67edd8eec9 code=0x7fc00000 [ 253.038320][ T40] audit: type=1326 audit(2000000046.579:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12631 comm="syz.4.2486" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67edd8eec9 code=0x7fc00000 [ 253.041134][T12666] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 253.151397][T12676] binder: 12672:12676 ioctl c0306201 200000000640 returned -22 [ 253.263766][T12686] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2507'. [ 253.276837][T12684] bpf: Bad value for 'uid' [ 253.320337][T12691] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 253.388735][T12697] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2510'. [ 253.449331][T12700] futex_wake_op: syz.4.2511 tries to shift op by 32; fix this program [ 254.036275][T12724] FAULT_INJECTION: forcing a failure. [ 254.036275][T12724] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 254.041895][T12724] CPU: 1 UID: 0 PID: 12724 Comm: syz.2.2519 Not tainted syzkaller #0 PREEMPT(full) [ 254.041912][T12724] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 254.041920][T12724] Call Trace: [ 254.041926][T12724] [ 254.041932][T12724] dump_stack_lvl+0x16c/0x1f0 [ 254.041947][T12724] should_fail_ex+0x512/0x640 [ 254.041961][T12724] should_fail_alloc_page+0xe7/0x130 [ 254.041979][T12724] prepare_alloc_pages+0x3c2/0x610 [ 254.041995][T12724] __alloc_frozen_pages_noprof+0x18b/0x2470 [ 254.042014][T12724] ? stack_trace_save+0x8e/0xc0 [ 254.042032][T12724] ? __pfx_stack_trace_save+0x10/0x10 [ 254.042049][T12724] ? stack_depot_save_flags+0x29/0x9c0 [ 254.042062][T12724] ? find_held_lock+0x2b/0x80 [ 254.042079][T12724] ? kasan_save_stack+0x42/0x60 [ 254.042090][T12724] ? kasan_save_stack+0x33/0x60 [ 254.042100][T12724] ? kasan_save_track+0x14/0x30 [ 254.042111][T12724] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 254.042128][T12724] ? inode_init_always_gfp+0xce4/0x1030 [ 254.042141][T12724] ? new_inode+0x22/0x1c0 [ 254.042155][T12724] ? drm_debugfs_clients_add+0x6f/0x200 [ 254.042170][T12724] ? drm_file_alloc+0x5c6/0xb40 [ 254.042184][T12724] ? drm_open_helper+0x204/0x550 [ 254.042198][T12724] ? drm_open+0x1a0/0x3e0 [ 254.042211][T12724] ? drm_stub_open+0x20c/0x380 [ 254.042230][T12724] ? chrdev_open+0x234/0x6a0 [ 254.042243][T12724] ? look_up_lock_class+0x6b/0x150 [ 254.042261][T12724] ? do_syscall_64+0xcd/0x4e0 [ 254.042274][T12724] ? __lock_acquire+0xb97/0x1ce0 [ 254.042286][T12724] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 254.042303][T12724] ? policy_nodemask+0xea/0x4e0 [ 254.042318][T12724] alloc_pages_mpol+0x1fb/0x550 [ 254.042333][T12724] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 254.042348][T12724] ? find_held_lock+0x2b/0x80 [ 254.042365][T12724] alloc_pages_noprof+0x131/0x390 [ 254.042379][T12724] get_free_pages_noprof+0x10/0xb0 [ 254.042392][T12724] inode_doinit_with_dentry+0x8d6/0x12e0 [ 254.042408][T12724] ? __pfx_inode_doinit_with_dentry+0x10/0x10 [ 254.042421][T12724] ? new_inode+0x15a/0x1c0 [ 254.042438][T12724] selinux_d_instantiate+0x26/0x30 [ 254.042449][T12724] security_d_instantiate+0x142/0x1a0 [ 254.042464][T12724] d_instantiate+0x5c/0x90 [ 254.042481][T12724] debugfs_create_dir+0x1b5/0x5f0 [ 254.042495][T12724] drm_debugfs_clients_add+0x6f/0x200 [ 254.042510][T12724] drm_file_alloc+0x5c6/0xb40 [ 254.042527][T12724] drm_open_helper+0x204/0x550 [ 254.042545][T12724] drm_open+0x1a0/0x3e0 [ 254.042560][T12724] ? __pfx_drm_open+0x10/0x10 [ 254.042574][T12724] drm_stub_open+0x20c/0x380 [ 254.042590][T12724] ? __pfx_drm_stub_open+0x10/0x10 [ 254.042604][T12724] chrdev_open+0x234/0x6a0 [ 254.042618][T12724] ? __pfx_chrdev_open+0x10/0x10 [ 254.042631][T12724] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 254.042648][T12724] do_dentry_open+0x982/0x1530 [ 254.042660][T12724] ? __pfx_chrdev_open+0x10/0x10 [ 254.042676][T12724] vfs_open+0x82/0x3f0 [ 254.042692][T12724] path_openat+0x1de4/0x2cb0 [ 254.042793][T12724] ? __pfx_path_openat+0x10/0x10 [ 254.042810][T12724] do_filp_open+0x20b/0x470 [ 254.042823][T12724] ? __pfx_do_filp_open+0x10/0x10 [ 254.042845][T12724] ? alloc_fd+0x471/0x7d0 [ 254.042862][T12724] do_sys_openat2+0x11b/0x1d0 [ 254.042929][T12724] ? __pfx_do_sys_openat2+0x10/0x10 [ 254.042949][T12724] ? find_held_lock+0x2b/0x80 [ 254.042974][T12724] ? handle_mm_fault+0x2ab/0xd10 [ 254.043006][T12724] __x64_sys_openat+0x174/0x210 [ 254.043028][T12724] ? __pfx___x64_sys_openat+0x10/0x10 [ 254.043054][T12724] ? do_user_addr_fault+0x843/0x1370 [ 254.043083][T12724] do_syscall_64+0xcd/0x4e0 [ 254.043102][T12724] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.043119][T12724] RIP: 0033:0x7f2a0c58d710 [ 254.043135][T12724] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 69 95 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 bc 95 02 00 8b 44 [ 254.043151][T12724] RSP: 002b:00007f2a0d3e2b70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 254.043187][T12724] RAX: ffffffffffffffda RBX: 0000000000020001 RCX: 00007f2a0c58d710 [ 254.043201][T12724] RDX: 0000000000020001 RSI: 00007f2a0d3e2c10 RDI: 00000000ffffff9c [ 254.043211][T12724] RBP: 00007f2a0d3e2c10 R08: 0000000000000000 R09: 0023647261632f69 [ 254.043222][T12724] R10: 0000000000000000 R11: 0000000000000293 R12: cccccccccccccccd [ 254.043235][T12724] R13: 00007f2a0c7e6038 R14: 00007f2a0c7e5fa0 R15: 00007ffd8a3e0088 [ 254.043257][T12724] [ 254.310130][T12732] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2523'. [ 254.320307][T12732] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 254.474833][T12744] FAULT_INJECTION: forcing a failure. [ 254.474833][T12744] name failslab, interval 1, probability 0, space 0, times 0 [ 254.479130][T12744] CPU: 0 UID: 0 PID: 12744 Comm: syz.0.2529 Not tainted syzkaller #0 PREEMPT(full) [ 254.479147][T12744] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 254.479155][T12744] Call Trace: [ 254.479159][T12744] [ 254.479164][T12744] dump_stack_lvl+0x16c/0x1f0 [ 254.479182][T12744] should_fail_ex+0x512/0x640 [ 254.479198][T12744] should_failslab+0xc2/0x120 [ 254.479213][T12744] kmem_cache_alloc_noprof+0x75/0x6e0 [ 254.479231][T12744] ? net_generic+0xea/0x2a0 [ 254.479246][T12744] ? __nf_conntrack_alloc+0xd1/0x660 [ 254.479264][T12744] ? __nf_conntrack_alloc+0xd1/0x660 [ 254.479279][T12744] __nf_conntrack_alloc+0xd1/0x660 [ 254.479297][T12744] init_conntrack.constprop.0+0xd3e/0x1080 [ 254.479315][T12744] ? __pfx_init_conntrack.constprop.0+0x10/0x10 [ 254.479332][T12744] ? __pfx_hash_conntrack_raw+0x10/0x10 [ 254.479349][T12744] ? __pfx_csum_and_copy_from_iter_full+0x10/0x10 [ 254.479370][T12744] nf_conntrack_in+0xf29/0x1930 [ 254.479392][T12744] ? __pfx_nf_conntrack_in+0x10/0x10 [ 254.479415][T12744] ? __pfx_ipv4_conntrack_local+0x10/0x10 [ 254.479429][T12744] ipv4_conntrack_local+0x160/0x250 [ 254.479443][T12744] nf_hook_slow+0xbe/0x200 [ 254.479458][T12744] nf_hook+0x371/0x680 [ 254.479472][T12744] ? __pfx_dst_output+0x10/0x10 [ 254.479486][T12744] ? __pfx_nf_hook+0x10/0x10 [ 254.479505][T12744] ? __pfx_dst_output+0x10/0x10 [ 254.479519][T12744] ? __ip_make_skb+0x1320/0x2080 [ 254.479534][T12744] ? do_csum+0x26f/0x2d0 [ 254.479550][T12744] __ip_local_out+0x33a/0x7c0 [ 254.479564][T12744] ? __pfx_dst_output+0x10/0x10 [ 254.479580][T12744] ip_push_pending_frames+0xa4/0x5d0 [ 254.479597][T12744] raw_sendmsg+0x144e/0x38b0 [ 254.479613][T12744] ? __pfx_raw_sendmsg+0x10/0x10 [ 254.479624][T12744] ? avc_has_perm_noaudit+0x149/0x3b0 [ 254.479642][T12744] ? avc_has_perm+0x144/0x1f0 [ 254.479663][T12744] ? sock_has_perm+0x259/0x2f0 [ 254.479685][T12744] ? __import_iovec+0x1dd/0x650 [ 254.479700][T12744] ? __pfx_raw_sendmsg+0x10/0x10 [ 254.479711][T12744] inet_sendmsg+0x119/0x140 [ 254.479723][T12744] ____sys_sendmsg+0x973/0xc70 [ 254.479739][T12744] ? copy_msghdr_from_user+0x10a/0x160 [ 254.479752][T12744] ? __pfx_____sys_sendmsg+0x10/0x10 [ 254.479798][T12744] ___sys_sendmsg+0x134/0x1d0 [ 254.479818][T12744] ? __pfx____sys_sendmsg+0x10/0x10 [ 254.479850][T12744] __sys_sendmsg+0x16d/0x220 [ 254.479864][T12744] ? __pfx___sys_sendmsg+0x10/0x10 [ 254.479885][T12744] do_syscall_64+0xcd/0x4e0 [ 254.479897][T12744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.479909][T12744] RIP: 0033:0x7f3dffd8eec9 [ 254.479918][T12744] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 254.479929][T12744] RSP: 002b:00007f3e00ccd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 254.479941][T12744] RAX: ffffffffffffffda RBX: 00007f3dfffe5fa0 RCX: 00007f3dffd8eec9 [ 254.479948][T12744] RDX: 0000000000000000 RSI: 00002000000016c0 RDI: 0000000000000003 [ 254.479954][T12744] RBP: 00007f3e00ccd090 R08: 0000000000000000 R09: 0000000000000000 [ 254.479961][T12744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 254.479967][T12744] R13: 00007f3dfffe6038 R14: 00007f3dfffe5fa0 R15: 00007ffcefe690a8 [ 254.479981][T12744] [ 254.614860][ C0] vkms_vblank_simulate: vblank timer overrun [ 254.650684][T12749] overlayfs: failed to decode file handle (len=6, type=251, flags=0, err=-22) [ 254.899751][T12768] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2539'. [ 255.458658][ T5963] Bluetooth: hci4: unexpected event 0x03 length: 1 < 11 [ 256.097099][T12845] pim6reg: entered allmulticast mode [ 256.103444][ T29] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 256.139937][T12847] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2576'. [ 256.143512][T12847] bridge_slave_1: left allmulticast mode [ 256.145941][T12847] bridge_slave_1: left promiscuous mode [ 256.148102][T12847] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.152642][T12847] bridge_slave_0: left allmulticast mode [ 256.154895][T12847] bridge_slave_0: left promiscuous mode [ 256.157265][T12847] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.263198][ T29] usb 7-1: Using ep0 maxpacket: 16 [ 256.269297][ T29] usb 7-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 256.273606][ T29] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.276907][ T29] usb 7-1: Product: syz [ 256.278937][ T29] usb 7-1: Manufacturer: syz [ 256.280937][ T29] usb 7-1: SerialNumber: syz [ 256.293505][ T29] usb 7-1: config 0 descriptor?? [ 256.556377][T12855] CIFS mount error: No usable UNC path provided in device string! [ 256.556377][T12855] [ 256.560056][T12855] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 256.713598][ T29] dvb_usb_dtv5100 7-1:0.0: probe with driver dvb_usb_dtv5100 failed with error -71 [ 256.720347][ T29] usb 7-1: USB disconnect, device number 23 [ 257.262942][T12870] tipc: Started in network mode [ 257.265153][T12870] tipc: Node identity da9583a84b76, cluster identity 4711 [ 257.268669][T12870] tipc: Enabled bearer , priority 0 [ 257.273321][T12870] syzkaller0: entered promiscuous mode [ 257.275655][T12870] syzkaller0: entered allmulticast mode [ 257.296628][T12869] tipc: Resetting bearer [ 257.313719][T12869] tipc: Disabling bearer [ 258.413518][T12892] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2590'. [ 259.575690][T12921] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2600'. [ 259.634708][T12923] binder: 12922:12923 ioctl c0306201 0 returned -14 [ 259.639178][T12923] binder: 12922:12923 ioctl c0306201 200000000640 returned -22 [ 259.681461][T12927] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 259.684504][T12927] UDF-fs: Scanning with blocksize 2048 failed [ 259.689665][T12927] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 259.692313][T12927] UDF-fs: Scanning with blocksize 4096 failed [ 259.763430][ T53] usb 9-1: new low-speed USB device number 7 using dummy_hcd [ 259.824607][T12945] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2611'. [ 259.886386][T12950] input: syz1 as /devices/virtual/input/input38 [ 259.924807][ T53] usb 9-1: config 0 has no interfaces? [ 259.926765][ T53] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 259.930113][ T53] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.936081][ T53] usb 9-1: config 0 descriptor?? [ 260.098316][ T5963] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 260.103433][ T5963] CPU: 3 UID: 0 PID: 5963 Comm: kworker/u33:4 Not tainted syzkaller #0 PREEMPT(full) [ 260.103461][ T5963] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 260.103474][ T5963] Workqueue: hci4 hci_rx_work [ 260.103498][ T5963] Call Trace: [ 260.103503][ T5963] [ 260.103510][ T5963] dump_stack_lvl+0x16c/0x1f0 [ 260.103531][ T5963] sysfs_warn_dup+0x7f/0xa0 [ 260.103602][ T5963] sysfs_create_dir_ns+0x24b/0x2b0 [ 260.103628][ T5963] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 260.103654][ T5963] ? find_held_lock+0x2b/0x80 [ 260.103816][ T5963] ? do_raw_spin_unlock+0x172/0x230 [ 260.103844][ T5963] kobject_add_internal+0x2c4/0x9b0 [ 260.103875][ T5963] kobject_add+0x16e/0x240 [ 260.103895][ T5963] ? __pfx_kobject_add+0x10/0x10 [ 260.103912][ T5963] ? do_raw_spin_unlock+0x172/0x230 [ 260.103928][ T5963] ? kobject_put+0xab/0x5a0 [ 260.103944][ T5963] device_add+0x288/0x1aa0 [ 260.103964][ T5963] ? __pfx_dev_set_name+0x10/0x10 [ 260.103976][ T5963] ? __pfx_device_add+0x10/0x10 [ 260.103993][ T5963] ? mgmt_send_event_skb+0x2fb/0x460 [ 260.104020][ T5963] hci_conn_add_sysfs+0x17e/0x230 [ 260.104040][ T5963] le_conn_complete_evt+0x1260/0x2150 [ 260.104074][ T5963] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 260.104097][ T5963] ? hci_event_packet+0x459/0x11c0 [ 260.104128][ T5963] hci_le_conn_complete_evt+0x23c/0x370 [ 260.104161][ T5963] hci_le_meta_evt+0x357/0x5e0 [ 260.104178][ T5963] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 260.104205][ T5963] hci_event_packet+0x682/0x11c0 [ 260.104229][ T5963] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 260.104247][ T5963] ? __pfx_hci_event_packet+0x10/0x10 [ 260.104280][ T5963] ? kcov_remote_start+0x3c9/0x6d0 [ 260.104436][ T5963] ? lockdep_hardirqs_on+0x7c/0x110 [ 260.104474][ T5963] hci_rx_work+0x2c5/0x16b0 [ 260.104497][ T5963] ? rcu_is_watching+0x12/0xc0 [ 260.104528][ T5963] process_one_work+0x9cc/0x1b70 [ 260.104558][ T5963] ? __pfx_process_one_work+0x10/0x10 [ 260.104589][ T5963] ? assign_work+0x1a0/0x250 [ 260.104613][ T5963] worker_thread+0x6c8/0xf10 [ 260.104643][ T5963] ? __pfx_worker_thread+0x10/0x10 [ 260.104666][ T5963] kthread+0x3c5/0x780 [ 260.104688][ T5963] ? __pfx_kthread+0x10/0x10 [ 260.104710][ T5963] ? rcu_is_watching+0x12/0xc0 [ 260.104728][ T5963] ? __pfx_kthread+0x10/0x10 [ 260.104741][ T5963] ret_from_fork+0x56d/0x730 [ 260.104754][ T5963] ? __pfx_kthread+0x10/0x10 [ 260.104768][ T5963] ret_from_fork_asm+0x1a/0x30 [ 260.104792][ T5963] [ 260.104942][ T5963] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 260.153145][T12917] bridge1: entered promiscuous mode [ 260.153726][ T5963] Bluetooth: hci4: failed to register connection device [ 260.158506][T12917] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 260.180631][T12917] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 260.182700][ T6007] usb 9-1: USB disconnect, device number 7 [ 260.641400][ T40] kauditd_printk_skb: 40 callbacks suppressed [ 260.641423][ T40] audit: type=1400 audit(2000000054.199:579): avc: denied { remount } for pid=12972 comm="syz.0.2623" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 260.659582][T12973] input: syz0 as /devices/virtual/input/input39 [ 260.678628][T12973] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2623'. [ 260.683352][T12973] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2623'. [ 260.704770][ T40] audit: type=1400 audit(2000000054.259:580): avc: denied { append } for pid=12972 comm="syz.0.2623" name="sg0" dev="devtmpfs" ino=720 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 260.717088][T12973] program syz.0.2623 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 261.145762][ T1424] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.148099][ T1424] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.257505][T13023] FAULT_INJECTION: forcing a failure. [ 261.257505][T13023] name failslab, interval 1, probability 0, space 0, times 0 [ 261.267415][T13023] CPU: 1 UID: 0 PID: 13023 Comm: syz.2.2639 Not tainted syzkaller #0 PREEMPT(full) [ 261.267433][T13023] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 261.267440][T13023] Call Trace: [ 261.267444][T13023] [ 261.267449][T13023] dump_stack_lvl+0x16c/0x1f0 [ 261.267465][T13023] should_fail_ex+0x512/0x640 [ 261.267477][T13023] ? kmem_cache_alloc_node_noprof+0x65/0x770 [ 261.267498][T13023] should_failslab+0xc2/0x120 [ 261.267512][T13023] kmem_cache_alloc_node_noprof+0x78/0x770 [ 261.267529][T13023] ? __alloc_skb+0x2b2/0x380 [ 261.267544][T13023] ? __alloc_skb+0x2b2/0x380 [ 261.267554][T13023] __alloc_skb+0x2b2/0x380 [ 261.267565][T13023] ? __pfx___alloc_skb+0x10/0x10 [ 261.267582][T13023] alloc_skb_with_frags+0xe0/0x860 [ 261.267596][T13023] ? __might_fault+0xe3/0x190 [ 261.267605][T13023] ? __might_fault+0x13b/0x190 [ 261.267617][T13023] sock_alloc_send_pskb+0x7f9/0x980 [ 261.267629][T13023] ? _copy_from_iter+0x15d/0x1720 [ 261.267645][T13023] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 261.267656][T13023] ? __lock_acquire+0xb97/0x1ce0 [ 261.267668][T13023] ? _parse_integer_limit+0x17f/0x1d0 [ 261.267686][T13023] ? iov_iter_advance+0x7d/0x6c0 [ 261.267721][T13023] tun_get_user+0x7e2/0x3cc0 [ 261.267747][T13023] ? __pfx_tun_get_user+0x10/0x10 [ 261.267759][T13023] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 261.267776][T13023] ? find_held_lock+0x2b/0x80 [ 261.267792][T13023] ? tun_get+0x191/0x370 [ 261.267812][T13023] tun_chr_write_iter+0xdc/0x210 [ 261.267824][T13023] vfs_write+0x7d3/0x11d0 [ 261.267836][T13023] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 261.267849][T13023] ? __pfx_vfs_write+0x10/0x10 [ 261.267859][T13023] ? find_held_lock+0x2b/0x80 [ 261.267882][T13023] ksys_write+0x12a/0x250 [ 261.267893][T13023] ? __pfx_ksys_write+0x10/0x10 [ 261.267908][T13023] do_syscall_64+0xcd/0x4e0 [ 261.267921][T13023] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.267932][T13023] RIP: 0033:0x7f2a0c58eec9 [ 261.267942][T13023] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 261.267953][T13023] RSP: 002b:00007f2a0d3e3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 261.267964][T13023] RAX: ffffffffffffffda RBX: 00007f2a0c7e5fa0 RCX: 00007f2a0c58eec9 [ 261.267972][T13023] RDX: 0000000000000ffe RSI: 0000200000000100 RDI: 0000000000000003 [ 261.267978][T13023] RBP: 00007f2a0d3e3090 R08: 0000000000000000 R09: 0000000000000000 [ 261.267985][T13023] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 261.267992][T13023] R13: 00007f2a0c7e6038 R14: 00007f2a0c7e5fa0 R15: 00007ffd8a3e0088 [ 261.268005][T13023] [ 261.483862][T13034] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 261.486821][T13034] UDF-fs: Scanning with blocksize 2048 failed [ 261.490005][T13034] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 261.492601][T13034] UDF-fs: Scanning with blocksize 4096 failed [ 261.534355][T13040] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2644'. [ 261.546368][T13040] batadv1: entered allmulticast mode [ 261.549161][ T5960] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 262.070973][T13066] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2651'. [ 262.076212][T13066] netem: unknown loss type 12 [ 262.078248][T13066] netem: change failed [ 262.080739][ T40] audit: type=1400 audit(2000000055.639:581): avc: denied { connect } for pid=13063 comm="syz.3.2652" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 262.082518][T13066] netlink: 292 bytes leftover after parsing attributes in process `syz.4.2651'. [ 262.097846][T13064] tmpfs: Unknown parameter 'mp!•tr?9ø‹üol' [ 262.284016][T13073] FAULT_INJECTION: forcing a failure. [ 262.284016][T13073] name failslab, interval 1, probability 0, space 0, times 0 [ 262.288529][T13073] CPU: 0 UID: 0 PID: 13073 Comm: syz.3.2655 Not tainted syzkaller #0 PREEMPT(full) [ 262.288547][T13073] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 262.288555][T13073] Call Trace: [ 262.288561][T13073] [ 262.288567][T13073] dump_stack_lvl+0x16c/0x1f0 [ 262.288581][T13073] should_fail_ex+0x512/0x640 [ 262.288594][T13073] ? __kmalloc_cache_noprof+0x5f/0x780 [ 262.288613][T13073] should_failslab+0xc2/0x120 [ 262.288627][T13073] __kmalloc_cache_noprof+0x72/0x780 [ 262.288644][T13073] ? nf_tables_addchain.constprop.0+0xc4a/0x1c90 [ 262.288663][T13073] ? nf_tables_addchain.constprop.0+0xc4a/0x1c90 [ 262.288678][T13073] nf_tables_addchain.constprop.0+0xc4a/0x1c90 [ 262.288693][T13073] ? nf_tables_table_notify+0x301/0x500 [ 262.288711][T13073] ? nft_chain_lookup+0x5be/0xaa0 [ 262.288729][T13073] ? __pfx_nf_tables_addchain.constprop.0+0x10/0x10 [ 262.288745][T13073] ? __lock_acquire+0x62e/0x1ce0 [ 262.288767][T13073] ? nla_strcmp+0xff/0x130 [ 262.288782][T13073] ? nft_table_lookup.part.0+0x1e3/0x230 [ 262.288798][T13073] nf_tables_newchain+0x206d/0x2da0 [ 262.288819][T13073] ? __nla_validate_parse+0x600/0x2880 [ 262.288835][T13073] ? __pfx_nf_tables_newchain+0x10/0x10 [ 262.288850][T13073] ? __pfx___nla_validate_parse+0x10/0x10 [ 262.288870][T13073] ? __nla_parse+0x40/0x60 [ 262.288886][T13073] nfnetlink_rcv_batch+0x190a/0x2350 [ 262.288912][T13073] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 262.288939][T13073] ? avc_has_perm_noaudit+0x149/0x3b0 [ 262.288967][T13073] ? __nla_parse+0x40/0x60 [ 262.288984][T13073] nfnetlink_rcv+0x3c1/0x430 [ 262.289001][T13073] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 262.289022][T13073] netlink_unicast+0x5aa/0x870 [ 262.289039][T13073] ? __pfx_netlink_unicast+0x10/0x10 [ 262.289058][T13073] netlink_sendmsg+0x8c8/0xdd0 [ 262.289074][T13073] ? __pfx_netlink_sendmsg+0x10/0x10 [ 262.289094][T13073] ____sys_sendmsg+0xa95/0xc70 [ 262.289111][T13073] ? copy_msghdr_from_user+0x10a/0x160 [ 262.289124][T13073] ? __pfx_____sys_sendmsg+0x10/0x10 [ 262.289146][T13073] ___sys_sendmsg+0x134/0x1d0 [ 262.289165][T13073] ? __pfx____sys_sendmsg+0x10/0x10 [ 262.289194][T13073] __sys_sendmsg+0x16d/0x220 [ 262.289207][T13073] ? __pfx___sys_sendmsg+0x10/0x10 [ 262.289231][T13073] do_syscall_64+0xcd/0x4e0 [ 262.289244][T13073] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.289255][T13073] RIP: 0033:0x7fc66f58eec9 [ 262.289265][T13073] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 262.289276][T13073] RSP: 002b:00007fc6703f9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 262.289287][T13073] RAX: ffffffffffffffda RBX: 00007fc66f7e5fa0 RCX: 00007fc66f58eec9 [ 262.289294][T13073] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000004 [ 262.289301][T13073] RBP: 00007fc6703f9090 R08: 0000000000000000 R09: 0000000000000000 [ 262.289308][T13073] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 262.289314][T13073] R13: 00007fc66f7e6038 R14: 00007fc66f7e5fa0 R15: 00007ffdb72d1dd8 [ 262.289328][T13073] [ 262.823391][ T5960] Bluetooth: hci0: command 0x0406 tx timeout [ 262.825880][ T53] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 262.828174][ T53] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 262.878854][ T5960] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 263.036958][ T40] audit: type=1400 audit(2000000056.599:582): avc: denied { checkpoint_restore } for pid=13102 comm="syz.4.2667" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 263.422787][T13113] FAULT_INJECTION: forcing a failure. [ 263.422787][T13113] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 263.427312][T13113] CPU: 2 UID: 0 PID: 13113 Comm: syz.4.2672 Not tainted syzkaller #0 PREEMPT(full) [ 263.427330][T13113] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 263.427338][T13113] Call Trace: [ 263.427343][T13113] [ 263.427348][T13113] dump_stack_lvl+0x16c/0x1f0 [ 263.427364][T13113] should_fail_ex+0x512/0x640 [ 263.427380][T13113] _copy_from_user+0x2e/0xd0 [ 263.427395][T13113] kstrtouint_from_user+0xd6/0x1d0 [ 263.427413][T13113] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 263.427430][T13113] ? __lock_acquire+0xb97/0x1ce0 [ 263.427451][T13113] proc_fail_nth_write+0x83/0x220 [ 263.427467][T13113] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 263.427486][T13113] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 263.427500][T13113] vfs_write+0x2a0/0x11d0 [ 263.427516][T13113] ? __pfx___mutex_lock+0x10/0x10 [ 263.427528][T13113] ? __pfx_vfs_write+0x10/0x10 [ 263.427544][T13113] ? __fget_files+0x20e/0x3c0 [ 263.427562][T13113] ksys_write+0x12a/0x250 [ 263.427574][T13113] ? __pfx_ksys_write+0x10/0x10 [ 263.427591][T13113] do_syscall_64+0xcd/0x4e0 [ 263.427604][T13113] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.427616][T13113] RIP: 0033:0x7f67edd8d97f [ 263.427627][T13113] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 263.427639][T13113] RSP: 002b:00007f67eed0e030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 263.427650][T13113] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f67edd8d97f [ 263.427658][T13113] RDX: 0000000000000001 RSI: 00007f67eed0e0a0 RDI: 0000000000000005 [ 263.427665][T13113] RBP: 00007f67eed0e090 R08: 0000000000000000 R09: 0000000000000000 [ 263.427673][T13113] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 263.427708][T13113] R13: 00007f67edfe6038 R14: 00007f67edfe5fa0 R15: 00007ffc4c4e4ea8 [ 263.427730][T13113] [ 263.502911][ C2] vkms_vblank_simulate: vblank timer overrun [ 263.533810][T13117] binder: 13116:13117 ioctl c0306201 200000000640 returned -22 [ 263.576445][T13121] SELinux: Context system_u:object_r:crond_var_run_t:s0 is not valid (left unmapped). [ 263.581460][ T40] audit: type=1400 audit(2000000057.139:583): avc: denied { relabelto } for pid=13120 comm="syz.2.2676" name="168" dev="tmpfs" ino=917 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 263.590648][ T40] audit: type=1400 audit(2000000057.139:584): avc: denied { associate } for pid=13120 comm="syz.2.2676" name="168" dev="tmpfs" ino=917 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:crond_var_run_t:s0" [ 263.603176][ T40] audit: type=1400 audit(2000000057.149:585): avc: denied { add_name } for pid=13120 comm="syz.2.2676" name="net_prio.prioidx" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 263.611537][ T40] audit: type=1400 audit(2000000057.149:586): avc: denied { associate } for pid=13120 comm="syz.2.2676" name="net_prio.prioidx" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 263.620498][ T40] audit: type=1400 audit(2000000057.149:587): avc: denied { read append open } for pid=13120 comm="syz.2.2676" path="/168/net_prio.prioidx" dev="tmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 263.634810][ T40] audit: type=1400 audit(2000000057.199:588): avc: denied { remove_name } for pid=11525 comm="syz-executor" name="net_prio.prioidx" dev="tmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 263.721532][T13131] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2681'. [ 263.955789][T13135] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 263.959779][T13135] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 263.970024][T13135] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 263.975194][T13135] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 263.979042][T13135] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 263.981643][T13135] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 263.989980][T13135] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 264.212774][T13142] binder: 13141:13142 ioctl c0306201 200000000640 returned -22 [ 264.593137][T13160] binder: 13159:13160 ioctl c0306201 200000000640 returned -22 [ 264.654727][T13166] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2697'. [ 264.657963][T13166] IPv6: Can't replace route, no match found [ 264.973424][ T5960] Bluetooth: hci2: command 0x0c1a tx timeout [ 264.974034][ T53] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 264.978089][ T53] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 265.003608][ T6046] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 265.183293][ T6046] usb 9-1: Using ep0 maxpacket: 16 [ 265.187720][ T6046] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 265.192291][ T6046] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 265.197064][ T6046] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 265.201433][ T6046] usb 9-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 265.204877][ T6046] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.209229][ T6046] usb 9-1: config 0 descriptor?? [ 265.600046][T13207] binder: 13206:13207 ioctl c0306201 200000000640 returned -22 [ 265.612480][T13210] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 265.616082][T13210] UDF-fs: Scanning with blocksize 2048 failed [ 265.618374][ T6046] shield 0003:0955:7214.000C: unknown main item tag 0x0 [ 265.621152][ T6046] shield 0003:0955:7214.000C: unknown main item tag 0x0 [ 265.622855][T13210] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 265.624765][ T6046] shield 0003:0955:7214.000C: unknown main item tag 0x0 [ 265.627980][T13210] UDF-fs: Scanning with blocksize 4096 failed [ 265.629432][ T6046] shield 0003:0955:7214.000C: unknown main item tag 0x0 [ 265.634991][ T6046] shield 0003:0955:7214.000C: unknown main item tag 0x0 [ 265.638438][T13215] ptm ptm1: ldisc open failed (-12), clearing slot 1 [ 265.640135][ T6046] input: HID 0955:7214 Haptics as /devices/virtual/input/input40 [ 265.659962][ T6046] shield 0003:0955:7214.000C: Registered Thunderstrike controller [ 265.662667][ T6046] shield 0003:0955:7214.000C: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.4-1/input0 [ 265.822222][T13181] shield 0003:0955:7214.000C: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 265.826790][ T57] usb 9-1: USB disconnect, device number 8 [ 265.829354][T13181] shield 0003:0955:7214.000C: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 265.834124][T13181] shield 0003:0955:7214.000C: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 265.839548][T13181] shield 0003:0955:7214.000C: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 265.943397][ T5960] Bluetooth: hci4: command 0x0c1a tx timeout [ 265.946954][ T53] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 265.949207][ T53] Bluetooth: hci4: Error when powering off device on rfkill (-110) [ 265.963084][ T5986] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 266.013141][ T5960] Bluetooth: hci1: command 0x040f tx timeout [ 266.015119][ T53] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 266.017081][ T53] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 266.062393][ T5963] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 266.080583][ T5963] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 266.085196][ T5963] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 266.089677][ T5963] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 266.095231][ T5963] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 266.107968][ T5960] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 266.111132][ T5960] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 266.114469][ T5960] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 266.117491][ T5960] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 266.120437][ T5960] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 266.123026][ T5986] usb 7-1: Using ep0 maxpacket: 16 [ 266.134535][ T5986] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 266.140742][ T5986] usb 7-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 266.145736][ T5986] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.149394][ T5986] usb 7-1: Product: syz [ 266.151683][ T5986] usb 7-1: Manufacturer: syz [ 266.154380][ T5986] usb 7-1: SerialNumber: syz [ 266.159272][ T5986] usb 7-1: config 0 descriptor?? [ 266.162129][ T5986] hub 7-1:0.0: bad descriptor, ignoring hub [ 266.164331][ T5986] hub 7-1:0.0: probe with driver hub failed with error -5 [ 266.169017][ T5986] input: syz syz as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/input/input41 [ 266.240810][T12993] chnl_net:caif_netlink_parms(): no params data found [ 266.334749][T12993] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.338505][T12993] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.341613][T12993] bridge_slave_0: entered allmulticast mode [ 266.349985][T12993] bridge_slave_0: entered promiscuous mode [ 266.356823][T12993] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.360131][T12993] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.364880][T12993] bridge_slave_1: entered allmulticast mode [ 266.367784][T13250] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2711'. [ 266.368916][T12993] bridge_slave_1: entered promiscuous mode [ 266.453827][T12993] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 266.460809][T12993] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 266.513005][T12993] team0: Port device team_slave_0 added [ 266.517763][T12993] team0: Port device team_slave_1 added [ 266.568286][T12993] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 266.570703][T12993] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 266.580783][T12993] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 266.586025][T12993] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 266.588434][T12993] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 266.598275][T12993] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 266.648241][T12993] hsr_slave_0: entered promiscuous mode [ 266.652383][T12993] hsr_slave_1: entered promiscuous mode [ 266.656690][T12993] debugfs: 'hsr0' already exists in 'hsr' [ 266.659560][T12993] Cannot create hsr debugfs directory [ 266.758295][T12993] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.829228][T12993] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.899250][T12993] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.958425][T12993] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.081058][T12993] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 267.086558][T12993] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 267.092263][T12993] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 267.100005][T12993] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 267.121234][T12993] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.123797][T12993] bridge0: port 2(bridge_slave_1) entered forwarding state [ 267.126206][T12993] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.128694][T12993] bridge0: port 1(bridge_slave_0) entered forwarding state [ 267.144964][ T1148] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.149824][ T1148] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.199854][T13266] binder: 13265:13266 ioctl c0306201 200000000640 returned -22 [ 267.202546][T12993] 8021q: adding VLAN 0 to HW filter on device bond0 [ 267.217282][T12993] 8021q: adding VLAN 0 to HW filter on device team0 [ 267.226501][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.229291][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 267.238783][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.241420][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 267.254349][T13268] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 267.257955][T13268] UDF-fs: Scanning with blocksize 2048 failed [ 267.262737][T13268] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 267.266420][T13268] UDF-fs: Scanning with blocksize 4096 failed [ 267.380351][T13279] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2719'. [ 267.385269][T13279] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2719'. [ 267.393758][T13279] gretap0: entered promiscuous mode [ 267.398491][T13279] gretap0: left promiscuous mode [ 267.427406][T12993] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 267.461972][T12993] veth0_vlan: entered promiscuous mode [ 267.470912][T12993] veth1_vlan: entered promiscuous mode [ 267.491748][T12993] veth0_macvtap: entered promiscuous mode [ 267.497101][T12993] veth1_macvtap: entered promiscuous mode [ 267.506951][T12993] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 267.517941][T12993] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 267.525411][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.528680][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.537024][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.540067][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.583272][ T53] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 267.597374][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 267.600360][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 267.632323][ T1148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 267.636162][ T1148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 267.718827][T13299] binder: 13298:13299 ioctl c0306201 200000000640 returned -22 [ 267.733349][ T53] usb 9-1: Using ep0 maxpacket: 16 [ 267.737965][ T53] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 267.745193][ T53] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 267.749631][ T53] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 267.754196][ T53] usb 9-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 267.757381][ T53] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.761322][ T53] usb 9-1: config 0 descriptor?? [ 267.814243][T13305] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 267.817745][T13305] UDF-fs: Scanning with blocksize 2048 failed [ 267.821677][T13305] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 267.825262][T13305] UDF-fs: Scanning with blocksize 4096 failed [ 268.173461][ T5960] Bluetooth: hci3: command tx timeout [ 268.178171][ T53] shield 0003:0955:7214.000D: unknown main item tag 0x0 [ 268.180718][ T53] shield 0003:0955:7214.000D: unknown main item tag 0x0 [ 268.183217][ T53] shield 0003:0955:7214.000D: unknown main item tag 0x0 [ 268.185422][ T53] shield 0003:0955:7214.000D: unknown main item tag 0x0 [ 268.187612][ T53] shield 0003:0955:7214.000D: unknown main item tag 0x0 [ 268.191930][ T53] input: HID 0955:7214 Haptics as /devices/virtual/input/input42 [ 268.212749][ T53] shield 0003:0955:7214.000D: Registered Thunderstrike controller [ 268.215876][ T53] shield 0003:0955:7214.000D: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.4-1/input0 [ 268.371514][T13323] binder: 13322:13323 ioctl c0306201 200000000640 returned -22 [ 268.375243][ T57] shield 0003:0955:7214.000D: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 268.380130][T13181] usb 9-1: USB disconnect, device number 9 [ 268.386984][ T57] shield 0003:0955:7214.000D: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 268.396979][ T57] shield 0003:0955:7214.000D: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 268.401970][ T57] shield 0003:0955:7214.000D: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 268.478101][T13327] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 268.481191][T13327] UDF-fs: Scanning with blocksize 2048 failed [ 268.485848][T13327] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 268.488620][T13327] UDF-fs: Scanning with blocksize 4096 failed [ 268.538632][T13331] netlink: 'syz.2.2736': attribute type 12 has an invalid length. [ 268.908569][T13359] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 268.912683][T13359] UDF-fs: Scanning with blocksize 2048 failed [ 268.917166][T13359] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 268.920274][T13359] UDF-fs: Scanning with blocksize 4096 failed [ 269.066154][ T40] kauditd_printk_skb: 3 callbacks suppressed [ 269.066165][ T40] audit: type=1400 audit(2000000062.629:592): avc: denied { read append } for pid=13373 comm="syz.2.2752" name="cgroup.procs" dev="cgroup" ino=62 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:semanage_exec_t:s0" [ 269.078845][ T40] audit: type=1400 audit(2000000062.629:593): avc: denied { bind } for pid=13373 comm="syz.2.2752" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 269.335481][ T5346] usb 7-1: reset high-speed USB device number 24 using dummy_hcd [ 269.335558][ T54] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 269.491445][T13383] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 269.495344][T13383] UDF-fs: Scanning with blocksize 2048 failed [ 269.498694][ T5346] usb 7-1: device firmware changed [ 269.499325][T13383] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 269.502458][ T29] usb 7-1: USB disconnect, device number 24 [ 269.506285][T13383] UDF-fs: Scanning with blocksize 4096 failed [ 269.507249][ T54] usb 9-1: Using ep0 maxpacket: 16 [ 269.532348][ T54] usb 9-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 269.539942][ T54] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.545032][ T54] usb 9-1: Product: syz [ 269.546603][ T54] usb 9-1: Manufacturer: syz [ 269.548409][ T54] usb 9-1: SerialNumber: syz [ 269.550452][ T5960] Bluetooth: hci3: SCO packet for unknown connection handle 0 [ 269.552604][ T54] usb 9-1: config 0 descriptor?? [ 269.684142][ T29] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 269.719310][T13389] @: renamed from vlan0 (while UP) [ 269.778530][ T54] dvb_usb_dtv5100 9-1:0.0: probe with driver dvb_usb_dtv5100 failed with error -71 [ 269.788416][ T54] usb 9-1: USB disconnect, device number 10 [ 269.843133][ T29] usb 7-1: Using ep0 maxpacket: 16 [ 269.847579][ T29] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 269.851011][T13400] FAULT_INJECTION: forcing a failure. [ 269.851011][T13400] name failslab, interval 1, probability 0, space 0, times 0 [ 269.852025][ T29] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 269.858437][T13400] CPU: 2 UID: 0 PID: 13400 Comm: syz.0.2765 Not tainted syzkaller #0 PREEMPT(full) [ 269.858468][T13400] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 269.858478][T13400] Call Trace: [ 269.858484][T13400] [ 269.858491][T13400] dump_stack_lvl+0x16c/0x1f0 [ 269.858515][T13400] should_fail_ex+0x512/0x640 [ 269.858536][T13400] ? fs_reclaim_acquire+0xae/0x150 [ 269.858561][T13400] should_failslab+0xc2/0x120 [ 269.858582][T13400] kmem_cache_alloc_noprof+0x75/0x6e0 [ 269.858610][T13400] ? __pfx_map_id_range_down+0x10/0x10 [ 269.858633][T13400] ? security_inode_alloc+0x3b/0x2b0 [ 269.858656][T13400] ? security_inode_alloc+0x3b/0x2b0 [ 269.858672][T13400] security_inode_alloc+0x3b/0x2b0 [ 269.858691][T13400] inode_init_always_gfp+0xce4/0x1030 [ 269.858716][T13400] alloc_inode+0x86/0x240 [ 269.858741][T13400] new_inode+0x22/0x1c0 [ 269.858767][T13400] __debugfs_create_file+0x11c/0x6b0 [ 269.858790][T13400] debugfs_create_file_full+0x41/0x60 [ 269.858812][T13400] kvm_dev_ioctl+0x14ca/0x1a80 [ 269.858841][T13400] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 269.859025][T13400] ? selinux_file_ioctl+0x180/0x270 [ 269.859046][T13400] ? selinux_file_ioctl+0xb4/0x270 [ 269.859065][T13400] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 269.859088][T13400] __x64_sys_ioctl+0x18e/0x210 [ 269.859118][T13400] do_syscall_64+0xcd/0x4e0 [ 269.859136][T13400] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.859157][T13400] RIP: 0033:0x7f8cc9f8eec9 [ 269.859172][T13400] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 269.859191][T13400] RSP: 002b:00007f8cc81f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 269.859207][T13400] RAX: ffffffffffffffda RBX: 00007f8cca1e5fa0 RCX: 00007f8cc9f8eec9 [ 269.859221][T13400] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000003 [ 269.859230][T13400] RBP: 00007f8cc81f6090 R08: 0000000000000000 R09: 0000000000000000 [ 269.859240][T13400] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 269.859253][T13400] R13: 00007f8cca1e6038 R14: 00007f8cca1e5fa0 R15: 00007ffe1b0ba938 [ 269.859278][T13400] [ 269.859302][T13400] debugfs: out of free dentries, can not create file 'remote_tlb_flush_requests' [ 269.861232][ T29] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 269.923834][T13404] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 269.930575][ T29] usb 7-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 269.934000][T13404] UDF-fs: Scanning with blocksize 2048 failed [ 269.936705][ T29] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.953275][T13404] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 269.956235][ T29] usb 7-1: config 0 descriptor?? [ 269.959397][T13404] UDF-fs: Scanning with blocksize 4096 failed [ 270.182426][T13417] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2772'. [ 270.188167][ T40] audit: type=1326 audit(2000000063.749:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13416 comm="syz.3.2772" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc66f58eec9 code=0x7ffc0000 [ 270.197917][ T40] audit: type=1326 audit(2000000063.749:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13416 comm="syz.3.2772" exe="/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fc66f58eec9 code=0x7ffc0000 [ 270.212517][ T40] audit: type=1326 audit(2000000063.749:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13416 comm="syz.3.2772" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc66f58eec9 code=0x7ffc0000 [ 270.223676][ T40] audit: type=1326 audit(2000000063.749:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13416 comm="syz.3.2772" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc66f58eec9 code=0x7ffc0000 [ 270.235167][ T40] audit: type=1326 audit(2000000063.749:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13416 comm="syz.3.2772" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc66f58eec9 code=0x7ffc0000 [ 270.245911][ T40] audit: type=1326 audit(2000000063.749:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13416 comm="syz.3.2772" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc66f58eec9 code=0x7ffc0000 [ 270.258466][ T5960] Bluetooth: hci3: command tx timeout [ 270.261725][ T40] audit: type=1326 audit(2000000063.799:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13416 comm="syz.3.2772" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc66f58eec9 code=0x7ffc0000 [ 270.272567][ T40] audit: type=1326 audit(2000000063.809:601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13416 comm="syz.3.2772" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc66f58eec9 code=0x7ffc0000 [ 270.384075][ T29] input: HID 0955:7214 Haptics as /devices/virtual/input/input43 [ 270.408638][ T29] shield 0003:0955:7214.000E: Registered Thunderstrike controller [ 270.412024][ T29] shield 0003:0955:7214.000E: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.2-1/input0 [ 270.424121][T13425] Falling back ldisc for ttyS3. [ 270.484039][T13438] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 270.487080][T13438] UDF-fs: Scanning with blocksize 2048 failed [ 270.491177][T13438] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 270.495322][T13438] UDF-fs: Scanning with blocksize 4096 failed [ 270.588726][ T843] shield 0003:0955:7214.000E: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 270.589228][ T55] usb 7-1: USB disconnect, device number 25 [ 270.593671][ T843] shield 0003:0955:7214.000E: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 270.600747][ T843] shield 0003:0955:7214.000E: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 270.606915][ T843] shield 0003:0955:7214.000E: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 270.701185][T13453] xt_nfacct: accounting object `\$‚9ZúM#íü¾mUµ|±^cÁ\F9YⳈ«ÃÖ' does not exist [ 270.719028][T13453] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2782'. [ 270.917320][T13461] binder: 13460:13461 ioctl c0306201 200000000640 returned -22 [ 270.982079][T13469] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 270.985604][T13469] UDF-fs: Scanning with blocksize 2048 failed [ 270.988925][T13469] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 270.991290][T13469] UDF-fs: Scanning with blocksize 4096 failed [ 271.011442][ T5960] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 271.162492][T13487] binder: 13486:13487 ioctl c0306201 200000000640 returned -22 [ 271.240358][T13496] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 271.243455][T13496] UDF-fs: Scanning with blocksize 2048 failed [ 271.246690][T13496] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 271.249057][T13496] UDF-fs: Scanning with blocksize 4096 failed [ 271.763077][ T54] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 271.923144][ T54] usb 7-1: Using ep0 maxpacket: 16 [ 271.927263][ T54] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 271.932442][ T54] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 271.936396][ T54] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 271.941548][ T54] usb 7-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 271.946237][ T54] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.952751][ T54] usb 7-1: config 0 descriptor?? [ 272.012100][T13515] binder: 13514:13515 ioctl c0306201 200000000640 returned -22 [ 272.061473][T13518] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 272.065226][T13518] UDF-fs: Scanning with blocksize 2048 failed [ 272.068602][T13518] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 272.072424][T13518] UDF-fs: Scanning with blocksize 4096 failed [ 272.324639][T13537] binder: 13535:13537 ioctl c0306201 200000000640 returned -22 [ 272.333593][ T5960] Bluetooth: hci3: command tx timeout [ 272.355257][T13539] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 272.357492][T13539] UDF-fs: Scanning with blocksize 2048 failed [ 272.360242][T13539] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 272.363464][T13539] UDF-fs: Scanning with blocksize 4096 failed [ 272.363866][ T54] hid_parser_main: 5 callbacks suppressed [ 272.363883][ T54] shield 0003:0955:7214.000F: unknown main item tag 0x0 [ 272.372459][ T54] shield 0003:0955:7214.000F: unknown main item tag 0x0 [ 272.379898][ T54] shield 0003:0955:7214.000F: unknown main item tag 0x0 [ 272.385693][ T54] shield 0003:0955:7214.000F: unknown main item tag 0x0 [ 272.388688][ T54] shield 0003:0955:7214.000F: unknown main item tag 0x0 [ 272.394202][ T54] input: HID 0955:7214 Haptics as /devices/virtual/input/input44 [ 272.417296][ T54] shield 0003:0955:7214.000F: Registered Thunderstrike controller [ 272.422670][ T54] shield 0003:0955:7214.000F: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.2-1/input0 [ 272.449022][T13544] FAULT_INJECTION: forcing a failure. [ 272.449022][T13544] name failslab, interval 1, probability 0, space 0, times 0 [ 272.454296][T13544] CPU: 0 UID: 0 PID: 13544 Comm: syz.0.2819 Not tainted syzkaller #0 PREEMPT(full) [ 272.454323][T13544] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 272.454333][T13544] Call Trace: [ 272.454340][T13544] [ 272.454348][T13544] dump_stack_lvl+0x16c/0x1f0 [ 272.454372][T13544] should_fail_ex+0x512/0x640 [ 272.454391][T13544] ? kmem_cache_alloc_node_noprof+0x65/0x770 [ 272.454439][T13544] should_failslab+0xc2/0x120 [ 272.454462][T13544] kmem_cache_alloc_node_noprof+0x78/0x770 [ 272.454494][T13544] ? __alloc_skb+0x2b2/0x380 [ 272.454522][T13544] ? __alloc_skb+0x2b2/0x380 [ 272.454541][T13544] ? __pfx_netlink_insert+0x10/0x10 [ 272.454564][T13544] __alloc_skb+0x2b2/0x380 [ 272.454586][T13544] ? __pfx___alloc_skb+0x10/0x10 [ 272.454608][T13544] ? netlink_autobind.isra.0+0x158/0x370 [ 272.454642][T13544] netlink_alloc_large_skb+0x69/0x140 [ 272.454670][T13544] netlink_sendmsg+0x698/0xdd0 [ 272.454702][T13544] ? __pfx_netlink_sendmsg+0x10/0x10 [ 272.454739][T13544] ____sys_sendmsg+0xa95/0xc70 [ 272.454771][T13544] ? copy_msghdr_from_user+0x10a/0x160 [ 272.454795][T13544] ? __pfx_____sys_sendmsg+0x10/0x10 [ 272.454839][T13544] ___sys_sendmsg+0x134/0x1d0 [ 272.454866][T13544] ? __pfx____sys_sendmsg+0x10/0x10 [ 272.454926][T13544] __sys_sendmsg+0x16d/0x220 [ 272.454952][T13544] ? __pfx___sys_sendmsg+0x10/0x10 [ 272.454995][T13544] do_syscall_64+0xcd/0x4e0 [ 272.455019][T13544] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.455040][T13544] RIP: 0033:0x7f8cc9f8eec9 [ 272.455057][T13544] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 272.455084][T13544] RSP: 002b:00007f8cc81d5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 272.455105][T13544] RAX: ffffffffffffffda RBX: 00007f8cca1e6090 RCX: 00007f8cc9f8eec9 [ 272.455118][T13544] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000005 [ 272.455131][T13544] RBP: 00007f8cc81d5090 R08: 0000000000000000 R09: 0000000000000000 [ 272.455143][T13544] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 272.455155][T13544] R13: 00007f8cca1e6128 R14: 00007f8cca1e6090 R15: 00007ffe1b0ba938 [ 272.455184][T13544] [ 272.564579][ T55] usb 7-1: USB disconnect, device number 26 [ 272.565474][ T29] shield 0003:0955:7214.000F: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 272.572004][ T29] shield 0003:0955:7214.000F: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 272.577403][ T29] shield 0003:0955:7214.000F: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 272.581486][ T29] shield 0003:0955:7214.000F: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 272.973726][ T29] usb 9-1: new low-speed USB device number 11 using dummy_hcd [ 273.103386][ T29] usb 9-1: device descriptor read/64, error -71 [ 273.186201][T13561] binder: 13560:13561 ioctl c0306201 200000000640 returned -22 [ 273.230070][T13564] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 273.232338][T13564] UDF-fs: Scanning with blocksize 2048 failed [ 273.235291][T13564] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 273.237525][T13564] UDF-fs: Scanning with blocksize 4096 failed [ 273.363580][ T29] usb 9-1: new low-speed USB device number 12 using dummy_hcd [ 273.438309][ T5960] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 273.503106][ T29] usb 9-1: device descriptor read/64, error -71 [ 273.563357][ T55] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 273.625975][ T29] usb usb9-port1: attempt power cycle [ 273.714698][ T55] usb 7-1: Using ep0 maxpacket: 16 [ 273.719207][ T55] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 273.724273][ T55] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 273.728568][ T55] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 273.735244][ T55] usb 7-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 273.739406][ T55] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.745539][ T55] usb 7-1: config 0 descriptor?? [ 273.817563][T13589] binder: 13588:13589 ioctl c0306201 200000000640 returned -22 [ 273.921554][T13597] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2846'. [ 273.968002][T13601] netlink: 'syz.0.2848': attribute type 10 has an invalid length. [ 273.971124][T13601] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2848'. [ 273.975847][T13601] batadv0: entered promiscuous mode [ 273.977531][T13601] batadv0: entered allmulticast mode [ 273.979826][T13601] bridge0: port 3(batadv0) entered blocking state [ 273.982197][T13601] bridge0: port 3(batadv0) entered disabled state [ 273.983188][ T29] usb 9-1: new low-speed USB device number 13 using dummy_hcd [ 273.987701][T13601] bridge0: port 3(batadv0) entered blocking state [ 273.990378][T13601] bridge0: port 3(batadv0) entered forwarding state [ 274.003905][ T29] usb 9-1: device descriptor read/8, error -71 [ 274.034074][T13605] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2850'. [ 274.155994][ T55] shield 0003:0955:7214.0010: unknown main item tag 0x0 [ 274.158384][ T55] shield 0003:0955:7214.0010: unknown main item tag 0x0 [ 274.160525][ T55] shield 0003:0955:7214.0010: unknown main item tag 0x0 [ 274.162751][ T55] shield 0003:0955:7214.0010: unknown main item tag 0x0 [ 274.166079][ T55] shield 0003:0955:7214.0010: unknown main item tag 0x0 [ 274.170968][T13613] 9pnet_virtio: no channels available for device syz [ 274.173640][ T55] input: HID 0955:7214 Haptics as /devices/virtual/input/input46 [ 274.189438][ T55] shield 0003:0955:7214.0010: Registered Thunderstrike controller [ 274.192500][ T55] shield 0003:0955:7214.0010: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.2-1/input0 [ 274.229576][T13614] FAULT_INJECTION: forcing a failure. [ 274.229576][T13614] name failslab, interval 1, probability 0, space 0, times 0 [ 274.234219][T13614] CPU: 3 UID: 0 PID: 13614 Comm: syz.0.2853 Not tainted syzkaller #0 PREEMPT(full) [ 274.234236][T13614] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 274.234243][T13614] Call Trace: [ 274.234258][T13614] [ 274.234263][T13614] dump_stack_lvl+0x16c/0x1f0 [ 274.234298][T13614] should_fail_ex+0x512/0x640 [ 274.234317][T13614] ? fs_reclaim_acquire+0xae/0x150 [ 274.234333][T13614] should_failslab+0xc2/0x120 [ 274.234347][T13614] __kmalloc_noprof+0xdd/0x880 [ 274.234363][T13614] ? tomoyo_encode2+0x100/0x3e0 [ 274.234378][T13614] ? tomoyo_encode2+0x100/0x3e0 [ 274.234390][T13614] tomoyo_encode2+0x100/0x3e0 [ 274.234404][T13614] tomoyo_encode+0x29/0x50 [ 274.234415][T13614] tomoyo_realpath_from_path+0x18f/0x6e0 [ 274.234431][T13614] tomoyo_path_perm+0x274/0x460 [ 274.234447][T13614] ? tomoyo_path_perm+0x260/0x460 [ 274.234465][T13614] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 274.234496][T13614] ? hook_file_truncate+0xc7/0x250 [ 274.234515][T13614] security_file_truncate+0x84/0x1e0 [ 274.234529][T13614] do_ftruncate+0x218/0x970 [ 274.234542][T13614] ? __pfx_do_ftruncate+0x10/0x10 [ 274.234558][T13614] do_sys_ftruncate+0x61/0xb0 [ 274.234570][T13614] __x64_sys_ftruncate+0x58/0x80 [ 274.234582][T13614] do_syscall_64+0xcd/0x4e0 [ 274.234594][T13614] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.234605][T13614] RIP: 0033:0x7f8cc9f8eec9 [ 274.234615][T13614] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 274.234626][T13614] RSP: 002b:00007f8cc81d5038 EFLAGS: 00000246 ORIG_RAX: 000000000000004d [ 274.234637][T13614] RAX: ffffffffffffffda RBX: 00007f8cca1e6090 RCX: 00007f8cc9f8eec9 [ 274.234644][T13614] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000003 [ 274.234650][T13614] RBP: 00007f8cc81d5090 R08: 0000000000000000 R09: 0000000000000000 [ 274.234657][T13614] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 274.234663][T13614] R13: 00007f8cca1e6128 R14: 00007f8cca1e6090 R15: 00007ffe1b0ba938 [ 274.234677][T13614] [ 274.234688][T13614] ERROR: Out of memory at tomoyo_realpath_from_path. [ 274.252993][ T29] usb 9-1: new low-speed USB device number 14 using dummy_hcd [ 274.354419][ T29] usb 9-1: device descriptor read/8, error -71 [ 274.356653][ T6048] shield 0003:0955:7214.0010: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 274.356783][ T24] usb 7-1: USB disconnect, device number 27 [ 274.363880][ T6048] shield 0003:0955:7214.0010: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 274.367851][ T6048] shield 0003:0955:7214.0010: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 274.372406][ T6048] shield 0003:0955:7214.0010: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 274.423348][ T5960] Bluetooth: hci3: command tx timeout [ 274.463927][ T29] usb usb9-port1: unable to enumerate USB device [ 274.463932][ T94] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 274.470038][ T94] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 274.611540][T13616] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=51 sclass=netlink_route_socket pid=13616 comm=syz.0.2854 [ 274.879758][T13627] netlink: 'syz.0.2859': attribute type 10 has an invalid length. [ 274.885001][T13627] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2859'. [ 275.193546][T13652] binder: 13651:13652 ioctl c0306201 0 returned -14 [ 275.303213][ T6048] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 275.483622][ T6048] usb 5-1: Using ep0 maxpacket: 16 [ 275.488200][ T6048] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 275.495555][ T6048] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 275.499793][ T6048] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 275.505648][ T6048] usb 5-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 275.509234][ T6048] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.516367][ T6048] usb 5-1: config 0 descriptor?? [ 275.814366][T13675] binder: 13674:13675 ioctl c0306201 0 returned -14 [ 275.945096][ T6048] input: HID 0955:7214 Haptics as /devices/virtual/input/input48 [ 275.969475][ T6048] shield 0003:0955:7214.0011: Registered Thunderstrike controller [ 275.972432][ T6048] shield 0003:0955:7214.0011: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.0-1/input0 [ 276.097506][T13691] tipc: Started in network mode [ 276.099093][T13691] tipc: Node identity 123f6d67be8f, cluster identity 4711 [ 276.101756][T13691] tipc: Enabled bearer , priority 0 [ 276.110642][T13691] tipc: Resetting bearer [ 276.122748][T13690] tipc: Disabling bearer [ 276.141341][ T55] shield 0003:0955:7214.0011: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 276.141652][ T57] usb 5-1: USB disconnect, device number 30 [ 276.146115][ T55] shield 0003:0955:7214.0011: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 276.152788][ T55] shield 0003:0955:7214.0011: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 276.157485][ T55] shield 0003:0955:7214.0011: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 276.315658][T13707] netlink: 'syz.4.2896': attribute type 4 has an invalid length. [ 276.318503][T13707] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2896'. [ 276.486254][T13720] FAULT_INJECTION: forcing a failure. [ 276.486254][T13720] name failslab, interval 1, probability 0, space 0, times 0 [ 276.492642][T13720] CPU: 0 UID: 0 PID: 13720 Comm: syz.2.2902 Not tainted syzkaller #0 PREEMPT(full) [ 276.492691][T13720] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 276.492705][T13720] Call Trace: [ 276.492715][T13720] [ 276.492723][T13720] dump_stack_lvl+0x16c/0x1f0 [ 276.492750][T13720] should_fail_ex+0x512/0x640 [ 276.492773][T13720] ? kmem_cache_alloc_node_noprof+0x65/0x770 [ 276.492809][T13720] should_failslab+0xc2/0x120 [ 276.492835][T13720] kmem_cache_alloc_node_noprof+0x78/0x770 [ 276.492867][T13720] ? __alloc_skb+0x2b2/0x380 [ 276.492916][T13720] ? __alloc_skb+0x2b2/0x380 [ 276.492934][T13720] __alloc_skb+0x2b2/0x380 [ 276.492956][T13720] ? __pfx___alloc_skb+0x10/0x10 [ 276.492979][T13720] ? find_held_lock+0x2b/0x80 [ 276.493017][T13720] ? is_bpf_text_address+0x8a/0x1a0 [ 276.493045][T13720] ? bpf_ksym_find+0x127/0x1c0 [ 276.493078][T13720] alloc_skb_with_frags+0xe0/0x860 [ 276.493112][T13720] sock_alloc_send_pskb+0x7f9/0x980 [ 276.493145][T13720] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 276.493173][T13720] ? __lock_acquire+0x62e/0x1ce0 [ 276.493198][T13720] __ip_append_data+0x2149/0x41a0 [ 276.493238][T13720] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 276.493261][T13720] ? find_held_lock+0x2b/0x80 [ 276.493292][T13720] ? ip_dst_mtu_maybe_forward.constprop.0+0x328/0x750 [ 276.493332][T13720] ? ip_dst_mtu_maybe_forward.constprop.0+0x332/0x750 [ 276.493367][T13720] ? __pfx___ip_append_data+0x10/0x10 [ 276.493395][T13720] ? dst_alloc+0xc0/0x1a0 [ 276.493423][T13720] ip_make_skb+0x27f/0x300 [ 276.493457][T13720] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 276.493492][T13720] ? __pfx_ip_make_skb+0x10/0x10 [ 276.493539][T13720] ? ip_route_output_key_hash+0x143/0x2b0 [ 276.493581][T13720] ? udp_sendmsg+0x17d7/0x2870 [ 276.493609][T13720] udp_sendmsg+0x17d7/0x2870 [ 276.493643][T13720] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 276.493677][T13720] ? __pfx_udp_sendmsg+0x10/0x10 [ 276.493704][T13720] ? tomoyo_supervisor+0xb0c/0x13b0 [ 276.493735][T13720] ? vsnprintf+0x318/0x1160 [ 276.493774][T13720] ? __pfx_vsnprintf+0x10/0x10 [ 276.493816][T13720] ? __lock_acquire+0xb97/0x1ce0 [ 276.493835][T13720] ? look_up_lock_class+0x6b/0x150 [ 276.493884][T13720] udpv6_sendmsg+0x128f/0x2d30 [ 276.493930][T13720] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 276.493966][T13720] ? __lock_acquire+0xb97/0x1ce0 [ 276.494002][T13720] ? reacquire_held_locks+0xcd/0x1f0 [ 276.494046][T13720] ? rcu_is_watching+0x12/0xc0 [ 276.494079][T13720] ? __local_bh_enable_ip+0xa4/0x120 [ 276.494109][T13720] ? lockdep_hardirqs_on+0x7c/0x110 [ 276.494141][T13720] ? inet_autobind+0x145/0x1a0 [ 276.494172][T13720] ? __local_bh_enable_ip+0xa4/0x120 [ 276.494202][T13720] ? inet_autobind+0x14a/0x1a0 [ 276.494232][T13720] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 276.494264][T13720] ? inet6_sendmsg+0x105/0x140 [ 276.494293][T13720] inet6_sendmsg+0x105/0x140 [ 276.494326][T13720] ____sys_sendmsg+0x705/0xc70 [ 276.494359][T13720] ? __pfx_____sys_sendmsg+0x10/0x10 [ 276.494405][T13720] ___sys_sendmsg+0x134/0x1d0 [ 276.494433][T13720] ? __pfx____sys_sendmsg+0x10/0x10 [ 276.494497][T13720] __sys_sendmsg+0x16d/0x220 [ 276.494524][T13720] ? __pfx___sys_sendmsg+0x10/0x10 [ 276.494571][T13720] do_syscall_64+0xcd/0x4e0 [ 276.494594][T13720] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.494617][T13720] RIP: 0033:0x7f2a0c58eec9 [ 276.494637][T13720] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 276.494659][T13720] RSP: 002b:00007f2a0d3e3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 276.494681][T13720] RAX: ffffffffffffffda RBX: 00007f2a0c7e5fa0 RCX: 00007f2a0c58eec9 [ 276.494695][T13720] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000003 [ 276.494709][T13720] RBP: 00007f2a0d3e3090 R08: 0000000000000000 R09: 0000000000000000 [ 276.494722][T13720] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 276.494735][T13720] R13: 00007f2a0c7e6038 R14: 00007f2a0c7e5fa0 R15: 00007ffd8a3e0088 [ 276.494765][T13720] [ 276.692644][ T40] kauditd_printk_skb: 4 callbacks suppressed [ 276.692661][ T40] audit: type=1400 audit(2000000070.249:606): avc: denied { bind } for pid=13722 comm="syz.2.2903" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 276.702224][T13722] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 276.704601][ T40] audit: type=1400 audit(2000000070.259:607): avc: denied { write } for pid=13722 comm="syz.2.2903" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 276.962030][ T57] IPVS: starting estimator thread 0... [ 277.053233][T13745] IPVS: using max 32 ests per chain, 76800 per kthread [ 277.088237][T13751] FAULT_INJECTION: forcing a failure. [ 277.088237][T13751] name failslab, interval 1, probability 0, space 0, times 0 [ 277.095663][T13751] CPU: 2 UID: 0 PID: 13751 Comm: syz.0.2915 Not tainted syzkaller #0 PREEMPT(full) [ 277.095690][T13751] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 277.095701][T13751] Call Trace: [ 277.095708][T13751] [ 277.095715][T13751] dump_stack_lvl+0x16c/0x1f0 [ 277.095738][T13751] should_fail_ex+0x512/0x640 [ 277.095761][T13751] should_failslab+0xc2/0x120 [ 277.095784][T13751] kmem_cache_alloc_node_noprof+0x78/0x770 [ 277.095812][T13751] ? __alloc_skb+0x2b2/0x380 [ 277.095837][T13751] ? __alloc_skb+0x2b2/0x380 [ 277.095853][T13751] __alloc_skb+0x2b2/0x380 [ 277.095871][T13751] ? __pfx___alloc_skb+0x10/0x10 [ 277.095896][T13751] ? __pfx_ieee80211_check_combinations+0x10/0x10 [ 277.095925][T13751] __netdev_alloc_skb+0x213/0x920 [ 277.095949][T13751] ieee80211_send_action_csa+0xeb/0xc00 [ 277.095978][T13751] __ieee80211_channel_switch+0x153d/0x2930 [ 277.096007][T13751] ? __pfx___ieee80211_channel_switch+0x10/0x10 [ 277.096026][T13751] ? cfg80211_chandef_valid+0x25d/0x15f0 [ 277.096043][T13751] ? ieee80211_get_channel_khz+0x14a/0x1e0 [ 277.096072][T13751] ? cfg80211_chandef_dfs_required+0xe1/0x1040 [ 277.096115][T13751] nl80211_channel_switch+0xbfd/0x1020 [ 277.096138][T13751] ? __pfx_nl80211_channel_switch+0x10/0x10 [ 277.096156][T13751] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 277.096216][T13751] ? nl80211_pre_doit+0x1b0/0xb10 [ 277.096245][T13751] genl_family_rcv_msg_doit+0x209/0x2f0 [ 277.096272][T13751] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 277.096312][T13751] ? bpf_lsm_capable+0x9/0x10 [ 277.096333][T13751] ? security_capable+0x7e/0x260 [ 277.096359][T13751] ? ns_capable+0xd7/0x110 [ 277.096385][T13751] genl_rcv_msg+0x55c/0x800 [ 277.096412][T13751] ? __pfx_genl_rcv_msg+0x10/0x10 [ 277.096437][T13751] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 277.096460][T13751] ? __pfx_nl80211_channel_switch+0x10/0x10 [ 277.096477][T13751] ? __pfx_nl80211_post_doit+0x10/0x10 [ 277.096508][T13751] netlink_rcv_skb+0x155/0x420 [ 277.096531][T13751] ? __pfx_genl_rcv_msg+0x10/0x10 [ 277.096556][T13751] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 277.096589][T13751] ? netlink_deliver_tap+0x1ae/0xd30 [ 277.096615][T13751] genl_rcv+0x28/0x40 [ 277.096636][T13751] netlink_unicast+0x5aa/0x870 [ 277.096660][T13751] ? __pfx_netlink_unicast+0x10/0x10 [ 277.096690][T13751] netlink_sendmsg+0x8c8/0xdd0 [ 277.096717][T13751] ? __pfx_netlink_sendmsg+0x10/0x10 [ 277.096747][T13751] ____sys_sendmsg+0xa95/0xc70 [ 277.096774][T13751] ? copy_msghdr_from_user+0x10a/0x160 [ 277.096794][T13751] ? __pfx_____sys_sendmsg+0x10/0x10 [ 277.096830][T13751] ___sys_sendmsg+0x134/0x1d0 [ 277.096852][T13751] ? __pfx____sys_sendmsg+0x10/0x10 [ 277.096902][T13751] __sys_sendmsg+0x16d/0x220 [ 277.096924][T13751] ? __pfx___sys_sendmsg+0x10/0x10 [ 277.096963][T13751] do_syscall_64+0xcd/0x4e0 [ 277.096982][T13751] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.097001][T13751] RIP: 0033:0x7f8cc9f8eec9 [ 277.097017][T13751] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 277.097035][T13751] RSP: 002b:00007f8cc81f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 277.097052][T13751] RAX: ffffffffffffffda RBX: 00007f8cca1e5fa0 RCX: 00007f8cc9f8eec9 [ 277.097064][T13751] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 277.097075][T13751] RBP: 00007f8cc81f6090 R08: 0000000000000000 R09: 0000000000000000 [ 277.097087][T13751] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 277.097097][T13751] R13: 00007f8cca1e6038 R14: 00007f8cca1e5fa0 R15: 00007ffe1b0ba938 [ 277.097124][T13751] [ 277.282696][T13759] tipc: Enabled bearer , priority 0 [ 277.289579][T13759] syzkaller0: entered promiscuous mode [ 277.291419][T13759] syzkaller0: entered allmulticast mode [ 277.306869][T13759] FAULT_INJECTION: forcing a failure. [ 277.306869][T13759] name failslab, interval 1, probability 0, space 0, times 0 [ 277.311847][T13759] CPU: 1 UID: 0 PID: 13759 Comm: syz.2.2919 Not tainted syzkaller #0 PREEMPT(full) [ 277.311865][T13759] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 277.311874][T13759] Call Trace: [ 277.311881][T13759] [ 277.311887][T13759] dump_stack_lvl+0x16c/0x1f0 [ 277.311907][T13759] should_fail_ex+0x512/0x640 [ 277.311922][T13759] ? __lock_acquire+0x62e/0x1ce0 [ 277.311938][T13759] should_failslab+0xc2/0x120 [ 277.311954][T13759] __kmalloc_cache_noprof+0x72/0x780 [ 277.311974][T13759] ? nsim_fib_event_nb+0x1c4/0x10d0 [ 277.311991][T13759] ? nsim_fib_event_nb+0x1c4/0x10d0 [ 277.312003][T13759] nsim_fib_event_nb+0x1c4/0x10d0 [ 277.312018][T13759] ? lock_acquire+0x179/0x350 [ 277.312031][T13759] notifier_call_chain+0xb9/0x410 [ 277.312044][T13759] ? __pfx_nsim_fib_event_nb+0x10/0x10 [ 277.312060][T13759] atomic_notifier_call_chain+0x71/0x1c0 [ 277.312073][T13759] call_fib_notifiers+0x33/0x70 [ 277.312090][T13759] fib6_del+0xebe/0x1770 [ 277.312107][T13759] ? __pfx_fib6_del+0x10/0x10 [ 277.312118][T13759] ? fib6_ifdown+0xcd/0x8f0 [ 277.312131][T13759] fib6_clean_node+0x424/0x5b0 [ 277.312143][T13759] ? __pfx_fib6_clean_node+0x10/0x10 [ 277.312161][T13759] fib6_walk_continue+0x452/0x8d0 [ 277.312195][T13759] fib6_walk+0x182/0x370 [ 277.312211][T13759] ? __pfx_fib6_ifdown+0x10/0x10 [ 277.312220][T13759] fib6_clean_tree+0xd4/0x110 [ 277.312236][T13759] ? __pfx_fib6_clean_tree+0x10/0x10 [ 277.312254][T13759] ? __pfx_fib6_clean_node+0x10/0x10 [ 277.312264][T13759] ? __pfx_fib6_ifdown+0x10/0x10 [ 277.312277][T13759] ? __pfx_fib6_ifdown+0x10/0x10 [ 277.312287][T13759] __fib6_clean_all+0x107/0x2d0 [ 277.312307][T13759] rt6_disable_ip+0x2ec/0x990 [ 277.312321][T13759] ? __pfx___mutex_trylock_common+0x10/0x10 [ 277.312337][T13759] ? __pfx_rt6_disable_ip+0x10/0x10 [ 277.312352][T13759] ? trace_contention_end+0xdd/0x130 [ 277.312366][T13759] addrconf_ifdown.isra.0+0x11d/0x1aa0 [ 277.312387][T13759] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 277.312401][T13759] ? __pfx_addrconf_ifdown.isra.0+0x10/0x10 [ 277.312430][T13759] addrconf_notify+0x89a/0x19e0 [ 277.312443][T13759] ? ip6mr_device_event+0x1bc/0x230 [ 277.312460][T13759] notifier_call_chain+0xb9/0x410 [ 277.312471][T13759] ? __pfx_addrconf_notify+0x10/0x10 [ 277.312486][T13759] call_netdevice_notifiers_info+0xbe/0x140 [ 277.312506][T13759] netif_set_mtu_ext+0x590/0x7d0 [ 277.312522][T13759] ? __pfx_netif_set_mtu_ext+0x10/0x10 [ 277.312534][T13759] ? __lock_acquire+0xb97/0x1ce0 [ 277.312552][T13759] netif_set_mtu+0x98/0x140 [ 277.312564][T13759] ? __pfx_netif_set_mtu+0x10/0x10 [ 277.312582][T13759] ? full_name_hash+0xbc/0x110 [ 277.312600][T13759] dev_set_mtu+0xb2/0x260 [ 277.312616][T13759] dev_ifsioc+0xd28/0x1f70 [ 277.312631][T13759] ? __pfx_dev_ifsioc+0x10/0x10 [ 277.312643][T13759] ? __pfx___mutex_lock+0x10/0x10 [ 277.312657][T13759] ? dev_load+0x8e/0x240 [ 277.312672][T13759] dev_ioctl+0x223/0x10e0 [ 277.312685][T13759] sock_do_ioctl+0x19d/0x280 [ 277.312702][T13759] ? __pfx_sock_do_ioctl+0x10/0x10 [ 277.312721][T13759] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 277.312738][T13759] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 277.312756][T13759] sock_ioctl+0x227/0x6b0 [ 277.312773][T13759] ? __pfx_sock_ioctl+0x10/0x10 [ 277.312788][T13759] ? hook_file_ioctl_common+0x145/0x410 [ 277.312808][T13759] ? selinux_file_ioctl+0x180/0x270 [ 277.312819][T13759] ? selinux_file_ioctl+0xb4/0x270 [ 277.312831][T13759] ? __pfx_sock_ioctl+0x10/0x10 [ 277.312848][T13759] __x64_sys_ioctl+0x18e/0x210 [ 277.312865][T13759] do_syscall_64+0xcd/0x4e0 [ 277.312899][T13759] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.312912][T13759] RIP: 0033:0x7f2a0c58eec9 [ 277.312924][T13759] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 277.312935][T13759] RSP: 002b:00007f2a0d3e3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 277.312947][T13759] RAX: ffffffffffffffda RBX: 00007f2a0c7e5fa0 RCX: 00007f2a0c58eec9 [ 277.312954][T13759] RDX: 0000200000002280 RSI: 0000000000008922 RDI: 0000000000000005 [ 277.312961][T13759] RBP: 00007f2a0d3e3090 R08: 0000000000000000 R09: 0000000000000000 [ 277.312968][T13759] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 277.312974][T13759] R13: 00007f2a0c7e6038 R14: 00007f2a0c7e5fa0 R15: 00007ffd8a3e0088 [ 277.312988][T13759] [ 277.449678][T13765] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2921'. [ 277.468306][T13759] tipc: Resetting bearer [ 277.509026][T13758] tipc: Resetting bearer [ 277.526316][T13758] tipc: Disabling bearer [ 277.707647][T13775] FAULT_INJECTION: forcing a failure. [ 277.707647][T13775] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 277.711991][T13775] CPU: 2 UID: 0 PID: 13775 Comm: syz.2.2926 Not tainted syzkaller #0 PREEMPT(full) [ 277.712008][T13775] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 277.712015][T13775] Call Trace: [ 277.712020][T13775] [ 277.712025][T13775] dump_stack_lvl+0x16c/0x1f0 [ 277.712040][T13775] should_fail_ex+0x512/0x640 [ 277.712056][T13775] _copy_from_user+0x2e/0xd0 [ 277.712070][T13775] copy_msghdr_from_user+0x98/0x160 [ 277.712085][T13775] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 277.712100][T13775] ? kfree+0x252/0x6d0 [ 277.712117][T13775] ? __lock_acquire+0x62e/0x1ce0 [ 277.712132][T13775] ___sys_recvmsg+0xdb/0x1a0 [ 277.712145][T13775] ? __pfx____sys_recvmsg+0x10/0x10 [ 277.712165][T13775] ? __pfx___might_resched+0x10/0x10 [ 277.712184][T13775] do_recvmmsg+0x2fe/0x750 [ 277.712211][T13775] ? __pfx_do_recvmmsg+0x10/0x10 [ 277.712227][T13775] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 277.712243][T13775] ? __fget_files+0x20e/0x3c0 [ 277.712258][T13775] __x64_sys_recvmmsg+0x22a/0x280 [ 277.712273][T13775] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 277.712291][T13775] do_syscall_64+0xcd/0x4e0 [ 277.712303][T13775] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.712314][T13775] RIP: 0033:0x7f2a0c58eec9 [ 277.712324][T13775] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 277.712335][T13775] RSP: 002b:00007f2a0d3e3038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 277.712347][T13775] RAX: ffffffffffffffda RBX: 00007f2a0c7e5fa0 RCX: 00007f2a0c58eec9 [ 277.712354][T13775] RDX: 0000000000000008 RSI: 0000200000002c00 RDI: 0000000000000003 [ 277.712360][T13775] RBP: 00007f2a0d3e3090 R08: 0000000000000000 R09: 0000000000000000 [ 277.712367][T13775] R10: 0000000040010022 R11: 0000000000000246 R12: 0000000000000002 [ 277.712374][T13775] R13: 00007f2a0c7e6038 R14: 00007f2a0c7e5fa0 R15: 00007ffd8a3e0088 [ 277.712388][T13775] [ 278.083113][ T9] usb 9-1: new low-speed USB device number 15 using dummy_hcd [ 278.235179][ T9] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 278.238042][ T9] usb 9-1: config 0 has no interface number 0 [ 278.240470][ T9] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 278.245131][ T9] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 278.248607][ T9] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 278.251662][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.256070][ T9] usb 9-1: config 0 descriptor?? [ 278.258680][T13782] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 278.264219][ T9] iowarrior 9-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 278.467397][ T843] usb 9-1: USB disconnect, device number 15 [ 278.677183][T13804] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 278.751267][T13812] i801_smbus 0000:00:1f.3: Illegal SMBus block read size 0 [ 278.844792][T13822] MINIX-fs: unable to read superblock [ 279.109221][T13847] input: syz1 as /devices/virtual/input/input49 [ 279.125844][ T9361] udevd[9361]: setting owner of /dev/input/js0 to uid=0, gid=104 failed: No such file or directory [ 279.321385][T13855] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 279.380511][T13857] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2951'. [ 279.825002][ T9] usb 9-1: new full-speed USB device number 16 using dummy_hcd [ 279.944711][T13868] binder: 13867:13868 ioctl c018620c 200000000240 returned -22 [ 279.991768][ T9] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 279.995156][ T9] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 279.997962][ T9] usb 9-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 280.001729][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.007156][ T9] usb 9-1: config 0 descriptor?? [ 280.012267][ T9] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 280.014784][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 280.020372][ T9] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 280.025940][ T9] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 280.028831][ T9] usb 9-1: media controller created [ 280.033503][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 280.044332][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 280.047108][ T9] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 280.061707][ T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb9/9-1/input/input50 [ 280.072435][ T9] dvb-usb: schedule remote query interval to 150 msecs. [ 280.075419][ T9] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 280.219973][T13860] dibusb: i2c wr: len=61 is too big! [ 280.219973][T13860] [ 280.224861][ T9] usb 9-1: USB disconnect, device number 16 [ 280.252269][ T9] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 280.451021][T13886] block nbd0: NBD_DISCONNECT [ 280.536522][T13894] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2965'. [ 280.790416][ T40] audit: type=1400 audit(2000524362.308:608): avc: denied { read } for pid=13911 comm="syz.3.2972" path="socket:[48466]" dev="sockfs" ino=48466 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 280.837033][T13916] FAULT_INJECTION: forcing a failure. [ 280.837033][T13916] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 280.842400][T13916] CPU: 1 UID: 0 PID: 13916 Comm: syz.4.2973 Not tainted syzkaller #0 PREEMPT(full) [ 280.842424][T13916] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 280.842436][T13916] Call Trace: [ 280.842457][T13916] [ 280.842464][T13916] dump_stack_lvl+0x16c/0x1f0 [ 280.842506][T13916] should_fail_ex+0x512/0x640 [ 280.842540][T13916] _copy_from_user+0x2e/0xd0 [ 280.842560][T13916] get_user_ifreq+0xf1/0x250 [ 280.842585][T13916] sock_do_ioctl+0x16b/0x280 [ 280.842610][T13916] ? __pfx_sock_do_ioctl+0x10/0x10 [ 280.842640][T13916] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 280.842668][T13916] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 280.842694][T13916] sock_ioctl+0x227/0x6b0 [ 280.842719][T13916] ? __pfx_sock_ioctl+0x10/0x10 [ 280.842743][T13916] ? hook_file_ioctl_common+0x145/0x410 [ 280.842772][T13916] ? selinux_file_ioctl+0x180/0x270 [ 280.842788][T13916] ? selinux_file_ioctl+0xb4/0x270 [ 280.842808][T13916] ? __pfx_sock_ioctl+0x10/0x10 [ 280.842834][T13916] __x64_sys_ioctl+0x18e/0x210 [ 280.842861][T13916] do_syscall_64+0xcd/0x4e0 [ 280.842880][T13916] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.842898][T13916] RIP: 0033:0x7f67edd8eec9 [ 280.842934][T13916] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 280.842952][T13916] RSP: 002b:00007f67eed0e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 280.842969][T13916] RAX: ffffffffffffffda RBX: 00007f67edfe5fa0 RCX: 00007f67edd8eec9 [ 280.842981][T13916] RDX: 0000200000000000 RSI: 0000000000008914 RDI: 0000000000000005 [ 280.842991][T13916] RBP: 00007f67eed0e090 R08: 0000000000000000 R09: 0000000000000000 [ 280.843001][T13916] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 280.843013][T13916] R13: 00007f67edfe6038 R14: 00007f67edfe5fa0 R15: 00007ffc4c4e4ea8 [ 280.843034][T13916] [ 280.927084][ T29] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 280.987282][T13927] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.2978'. [ 281.083213][ T29] usb 5-1: Using ep0 maxpacket: 16 [ 281.088194][ T29] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 281.092560][ T29] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 281.097888][ T29] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 281.107907][ T29] usb 5-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 281.111336][ T29] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.119738][ T29] usb 5-1: config 0 descriptor?? [ 281.125683][T13936] netlink: 504 bytes leftover after parsing attributes in process `syz.3.2982'. [ 281.405673][T13950] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.2988'. [ 281.548765][ T29] hid_parser_main: 5 callbacks suppressed [ 281.548789][ T29] shield 0003:0955:7214.0012: unknown main item tag 0x0 [ 281.565104][ T29] shield 0003:0955:7214.0012: unknown main item tag 0x0 [ 281.568865][ T29] shield 0003:0955:7214.0012: unknown main item tag 0x0 [ 281.571768][ T29] shield 0003:0955:7214.0012: unknown main item tag 0x0 [ 281.574711][ T29] shield 0003:0955:7214.0012: unknown main item tag 0x0 [ 281.584880][ T29] input: HID 0955:7214 Haptics as /devices/virtual/input/input51 [ 281.620227][ T29] shield 0003:0955:7214.0012: Registered Thunderstrike controller [ 281.623858][ T29] shield 0003:0955:7214.0012: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.0-1/input0 [ 281.767490][ T29] shield 0003:0955:7214.0012: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 281.771928][ T57] usb 5-1: USB disconnect, device number 31 [ 281.776979][ T29] shield 0003:0955:7214.0012: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 281.781604][ T29] shield 0003:0955:7214.0012: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 281.785974][ T29] shield 0003:0955:7214.0012: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 281.857747][T13960] FAULT_INJECTION: forcing a failure. [ 281.857747][T13960] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 281.863961][T13960] CPU: 1 UID: 0 PID: 13960 Comm: syz.4.2992 Not tainted syzkaller #0 PREEMPT(full) [ 281.863990][T13960] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 281.864001][T13960] Call Trace: [ 281.864008][T13960] [ 281.864015][T13960] dump_stack_lvl+0x16c/0x1f0 [ 281.864039][T13960] should_fail_ex+0x512/0x640 [ 281.864062][T13960] _copy_from_iter+0x29f/0x1720 [ 281.864083][T13960] ? _copy_from_iter+0x37e/0x1720 [ 281.864104][T13960] ? _copy_from_iter+0x15d/0x1720 [ 281.864125][T13960] ? __pfx__copy_from_iter+0x10/0x10 [ 281.864149][T13960] ? __pfx__copy_from_iter+0x10/0x10 [ 281.864171][T13960] ? _copy_from_iter+0x15d/0x1720 [ 281.864204][T13960] copy_page_from_iter+0xde/0x180 [ 281.864232][T13960] skb_copy_datagram_from_iter+0x2a0/0x740 [ 281.864263][T13960] tun_get_user+0x1850/0x3cc0 [ 281.864297][T13960] ? __pfx_tun_get_user+0x10/0x10 [ 281.864318][T13960] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 281.864348][T13960] ? find_held_lock+0x2b/0x80 [ 281.864375][T13960] ? tun_get+0x191/0x370 [ 281.864410][T13960] tun_chr_write_iter+0xdc/0x210 [ 281.864429][T13960] vfs_write+0x7d3/0x11d0 [ 281.864449][T13960] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 281.864471][T13960] ? __pfx_vfs_write+0x10/0x10 [ 281.864488][T13960] ? find_held_lock+0x2b/0x80 [ 281.864529][T13960] ksys_write+0x12a/0x250 [ 281.864547][T13960] ? __pfx_ksys_write+0x10/0x10 [ 281.864574][T13960] do_syscall_64+0xcd/0x4e0 [ 281.864594][T13960] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.864611][T13960] RIP: 0033:0x7f67edd8eec9 [ 281.864629][T13960] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 281.864647][T13960] RSP: 002b:00007f67eed0e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 281.864666][T13960] RAX: ffffffffffffffda RBX: 00007f67edfe5fa0 RCX: 00007f67edd8eec9 [ 281.864679][T13960] RDX: 000000000000ffdd RSI: 0000200000000280 RDI: 0000000000000004 [ 281.864691][T13960] RBP: 00007f67eed0e090 R08: 0000000000000000 R09: 0000000000000000 [ 281.864704][T13960] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 281.864714][T13960] R13: 00007f67edfe6038 R14: 00007f67edfe5fa0 R15: 00007ffc4c4e4ea8 [ 281.864740][T13960] [ 282.513697][T13974] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2996'. [ 284.134536][ T57] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 284.298045][ T57] usb 9-1: Using ep0 maxpacket: 16 [ 284.301694][ T57] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 284.305891][ T57] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 284.309745][ T57] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 284.314721][ T57] usb 9-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 284.319828][ T57] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.329800][ T57] usb 9-1: config 0 descriptor?? [ 284.628455][T14019] FAULT_INJECTION: forcing a failure. [ 284.628455][T14019] name failslab, interval 1, probability 0, space 0, times 0 [ 284.634319][T14019] CPU: 2 UID: 0 PID: 14019 Comm: syz.3.3013 Not tainted syzkaller #0 PREEMPT(full) [ 284.634343][T14019] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 284.634353][T14019] Call Trace: [ 284.634371][T14019] [ 284.634380][T14019] dump_stack_lvl+0x16c/0x1f0 [ 284.634399][T14019] should_fail_ex+0x512/0x640 [ 284.634415][T14019] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 284.634440][T14019] should_failslab+0xc2/0x120 [ 284.634459][T14019] kmem_cache_alloc_noprof+0x75/0x6e0 [ 284.634481][T14019] ? alloc_empty_file+0x55/0x1e0 [ 284.634504][T14019] ? alloc_empty_file+0x55/0x1e0 [ 284.634522][T14019] alloc_empty_file+0x55/0x1e0 [ 284.634541][T14019] dentry_open+0x46/0xd0 [ 284.634560][T14019] do_mq_open+0x4df/0x8c0 [ 284.634585][T14019] ? __pfx_do_mq_open+0x10/0x10 [ 284.634606][T14019] ? __fget_files+0x20e/0x3c0 [ 284.634623][T14019] __x64_sys_mq_open+0x155/0x1e0 [ 284.634644][T14019] ? __pfx___x64_sys_mq_open+0x10/0x10 [ 284.634675][T14019] do_syscall_64+0xcd/0x4e0 [ 284.634692][T14019] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.634710][T14019] RIP: 0033:0x7fc66f58eec9 [ 284.634724][T14019] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 284.634740][T14019] RSP: 002b:00007fc6703d8038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f0 [ 284.634757][T14019] RAX: ffffffffffffffda RBX: 00007fc66f7e6090 RCX: 00007fc66f58eec9 [ 284.634768][T14019] RDX: 0000000000000136 RSI: 0000000000000001 RDI: 0000200000000780 [ 284.634777][T14019] RBP: 00007fc6703d8090 R08: 0000000000000000 R09: 0000000000000000 [ 284.634783][T14019] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 284.634790][T14019] R13: 00007fc66f7e6128 R14: 00007fc66f7e6090 R15: 00007ffdb72d1dd8 [ 284.634805][T14019] [ 284.765841][ T57] shield 0003:0955:7214.0013: unknown main item tag 0x0 [ 284.770108][ T57] shield 0003:0955:7214.0013: unknown main item tag 0x0 [ 284.772735][ T57] shield 0003:0955:7214.0013: unknown main item tag 0x0 [ 284.775197][ T57] shield 0003:0955:7214.0013: unknown main item tag 0x0 [ 284.777445][ T57] shield 0003:0955:7214.0013: unknown main item tag 0x0 [ 284.793797][ T57] input: HID 0955:7214 Haptics as /devices/virtual/input/input52 [ 284.845847][ T57] shield 0003:0955:7214.0013: Registered Thunderstrike controller [ 284.849292][ T57] shield 0003:0955:7214.0013: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.4-1/input0 [ 284.949595][ T40] audit: type=1400 audit(2000524366.359:609): avc: denied { read } for pid=14022 comm="syz.0.3015" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 284.968644][T13181] shield 0003:0955:7214.0013: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 284.972210][ T5986] usb 9-1: USB disconnect, device number 17 [ 284.972728][T13181] shield 0003:0955:7214.0013: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 284.980466][T13181] shield 0003:0955:7214.0013: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 284.988114][T13181] shield 0003:0955:7214.0013: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 285.217500][ T5960] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 286.003285][T14069] netlink: 763 bytes leftover after parsing attributes in process `syz.3.3033'. [ 286.018301][ T40] audit: type=1400 audit(2000524367.396:610): avc: denied { associate } for pid=14068 comm="syz.3.3033" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 286.126916][T14081] netlink: 2384 bytes leftover after parsing attributes in process `syz.3.3038'. [ 286.168981][T14082] input: syz0 as /devices/virtual/input/input53 [ 286.186136][T14082] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3037'. [ 286.192623][T14082] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3037'. [ 286.201455][T14082] program syz.4.3037 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 286.297530][ T5986] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 286.456670][ T5986] usb 5-1: Using ep0 maxpacket: 16 [ 286.460802][ T5986] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 286.465857][ T5986] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 286.473968][ T5986] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 286.480645][ T5986] usb 5-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 286.485050][ T5986] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.491066][ T5986] usb 5-1: config 0 descriptor?? [ 286.531132][T14100] binder: 14099:14100 ioctl c018620c 200000000240 returned -22 [ 286.571179][ T40] audit: type=1326 audit(2000524367.954:611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14103 comm="syz.3.3048" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc66f58eec9 code=0x0 [ 286.914946][ T5986] shield 0003:0955:7214.0014: unknown main item tag 0x0 [ 286.920185][ T5986] shield 0003:0955:7214.0014: unknown main item tag 0x0 [ 286.922400][ T5986] shield 0003:0955:7214.0014: unknown main item tag 0x0 [ 286.924808][ T5986] shield 0003:0955:7214.0014: unknown main item tag 0x0 [ 286.931179][ C3] ------------[ cut here ]------------ [ 286.931245][ C3] ODEBUG: free active (active state 0) object: ffff888053c25890 object type: timer_list hint: rose_t0timer_expiry+0x0/0x150 [ 286.931628][ C3] WARNING: CPU: 3 PID: 5986 at lib/debugobjects.c:612 debug_print_object+0x1a2/0x2b0 [ 286.931660][ C3] Modules linked in: [ 286.931709][ C3] CPU: 3 UID: 0 PID: 5986 Comm: kworker/3:3 Not tainted syzkaller #0 PREEMPT(full) [ 286.931727][ C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 286.931739][ C3] Workqueue: usb_hub_wq hub_event [ 286.931763][ C3] RIP: 0010:debug_print_object+0x1a2/0x2b0 [ 286.931784][ C3] Code: fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 54 41 56 48 8b 14 dd 20 52 d0 8b 4c 89 e6 48 c7 c7 a0 46 d0 8b e8 4f 0e d0 fc 90 <0f> 0b 90 90 58 83 05 56 60 b6 0b 01 48 83 c4 18 5b 5d 41 5c 41 5d [ 286.931799][ C3] RSP: 0018:ffffc900006f8a18 EFLAGS: 00010282 [ 286.931812][ C3] RAX: 0000000000000000 RBX: 0000000000000003 RCX: ffffffff81799b88 [ 286.931822][ C3] RDX: ffff888025a5a480 RSI: ffffffff81799b95 RDI: 0000000000000001 [ 286.931833][ C3] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 286.931842][ C3] R10: 0000000000000000 R11: 0000000000000000 R12: ffffffff8bd04d40 [ 286.931851][ C3] R13: ffffffff8b6fffe0 R14: ffffffff8a46cd40 R15: ffffc900006f8b18 [ 286.931862][ C3] FS: 0000000000000000(0000) GS:ffff8880d7167000(0000) knlGS:0000000000000000 [ 286.931894][ C3] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 286.931908][ C3] CR2: 00007f2a0d3e2f98 CR3: 0000000059efb000 CR4: 0000000000352ef0 [ 286.931919][ C3] Call Trace: [ 286.931925][ C3] [ 286.931931][ C3] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 286.931957][ C3] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 286.931981][ C3] debug_check_no_obj_freed+0x4b7/0x600 [ 286.932009][ C3] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 286.932040][ C3] kfree+0x291/0x6d0 [ 286.932060][ C3] ? rose_timer_expiry+0x53f/0x630 [ 286.932085][ C3] ? rose_timer_expiry+0x53f/0x630 [ 286.932106][ C3] rose_timer_expiry+0x53f/0x630 [ 286.932128][ C3] ? __pfx_rose_timer_expiry+0x10/0x10 [ 286.932149][ C3] call_timer_fn+0x19a/0x620 [ 286.932167][ C3] ? __pfx_call_timer_fn+0x10/0x10 [ 286.932189][ C3] ? mark_held_locks+0x49/0x80 [ 286.932210][ C3] ? __pfx_rose_timer_expiry+0x10/0x10 [ 286.932233][ C3] __run_timers+0x6ef/0x960 [ 286.932253][ C3] ? __pfx___run_timers+0x10/0x10 [ 286.932281][ C3] run_timer_base+0x114/0x190 [ 286.932298][ C3] ? __pfx_run_timer_base+0x10/0x10 [ 286.932316][ C3] run_timer_softirq+0x1a/0x40 [ 286.932332][ C3] handle_softirqs+0x219/0x8e0 [ 286.932357][ C3] ? __pfx_handle_softirqs+0x10/0x10 [ 286.932381][ C3] __irq_exit_rcu+0x109/0x170 [ 286.932401][ C3] irq_exit_rcu+0x9/0x30 [ 286.932421][ C3] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 286.932443][ C3] [ 286.932449][ C3] [ 286.932456][ C3] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 286.932473][ C3] RIP: 0010:console_flush_all+0x9a2/0xc60 [ 286.932495][ C3] Code: 00 e8 b2 f0 28 00 9c 5b 81 e3 00 02 00 00 31 ff 48 89 de e8 60 f8 20 00 48 85 db 0f 85 55 01 00 00 e8 e2 fc 20 00 fb 4c 89 e0 <48> c1 e8 03 42 80 3c 38 00 0f 84 11 ff ff ff 4c 89 e7 e8 a7 6f 89 [ 286.932509][ C3] RSP: 0018:ffffc900030ce568 EFLAGS: 00000287 [ 286.932522][ C3] RAX: ffffffff8ee38238 RBX: 0000000000000000 RCX: ffffc90030047000 [ 286.932532][ C3] RDX: 0000000000100000 RSI: ffffffff819a164e RDI: 0000000000000007 [ 286.932542][ C3] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000 [ 286.932551][ C3] R10: 0000000000000000 R11: 0000000000000000 R12: ffffffff8ee38238 [ 286.932561][ C3] R13: ffffffff8ee381e0 R14: ffffc900030ce5f8 R15: dffffc0000000000 [ 286.932577][ C3] ? console_flush_all+0x99e/0xc60 [ 286.932599][ C3] ? console_flush_all+0x99e/0xc60 [ 286.932624][ C3] ? __pfx_console_flush_all+0x10/0x10 [ 286.932649][ C3] ? is_printk_cpu_sync_owner+0x32/0x40 [ 286.932674][ C3] console_unlock+0xd8/0x210 [ 286.932694][ C3] ? __pfx_console_unlock+0x10/0x10 [ 286.932716][ C3] ? dev_printk_emit+0xfa/0x140 [ 286.932735][ C3] ? __down_trylock_console_sem+0xb0/0x140 [ 286.932755][ C3] vprintk_emit+0x3d7/0x680 [ 286.932771][ C3] ? __pfx_vprintk_emit+0x10/0x10 [ 286.932790][ C3] dev_printk_emit+0xfa/0x140 [ 286.932802][ C3] ? __pfx_dev_printk_emit+0x10/0x10 [ 286.932820][ C3] ? hid_device_probe+0x5ba/0x8d0 [ 286.932835][ C3] ? really_probe+0x23e/0xa90 [ 286.932849][ C3] ? __driver_probe_device+0x1de/0x440 [ 286.932862][ C3] ? driver_probe_device+0x4c/0x1b0 [ 286.932877][ C3] ? __device_attach_driver+0x1df/0x310 [ 286.932905][ C3] __dev_printk+0xf5/0x270 [ 286.932923][ C3] _dev_warn+0xe4/0x120 [ 286.932948][ C3] ? __pfx__dev_warn+0x10/0x10 [ 286.932964][ C3] ? lockdep_hardirqs_on+0x7c/0x110 [ 286.932980][ C3] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 286.932998][ C3] ? __pfx____ratelimit+0x10/0x10 [ 286.933017][ C3] hid_parser_main+0x840/0xe60 [ 286.933033][ C3] ? fetch_item+0x1bb/0x530 [ 286.933048][ C3] hid_open_report+0x459/0x830 [ 286.933063][ C3] ? __pfx_hid_open_report+0x10/0x10 [ 286.933083][ C3] ? __pfx_shield_probe+0x10/0x10 [ 286.933095][ C3] shield_probe+0x88/0x1320 [ 286.933105][ C3] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 286.933118][ C3] ? __pfx_shield_probe+0x10/0x10 [ 286.933130][ C3] ? mark_held_locks+0x49/0x80 [ 286.933141][ C3] ? hid_match_id+0x258/0x2e0 [ 286.933159][ C3] ? __pfx_shield_probe+0x10/0x10 [ 286.933170][ C3] hid_device_probe+0x5ba/0x8d0 [ 286.933188][ C3] ? __pfx_hid_device_probe+0x10/0x10 [ 286.933206][ C3] really_probe+0x23e/0xa90 [ 286.933221][ C3] __driver_probe_device+0x1de/0x440 [ 286.933237][ C3] driver_probe_device+0x4c/0x1b0 [ 286.933252][ C3] __device_attach_driver+0x1df/0x310 [ 286.933267][ C3] ? __pfx___device_attach_driver+0x10/0x10 [ 286.933281][ C3] bus_for_each_drv+0x156/0x1e0 [ 286.933294][ C3] ? __pfx_bus_for_each_drv+0x10/0x10 [ 286.933306][ C3] ? lockdep_hardirqs_on+0x7c/0x110 [ 286.933322][ C3] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 286.933339][ C3] __device_attach+0x1e4/0x4b0 [ 286.933354][ C3] ? __pfx___device_attach+0x10/0x10 [ 286.933369][ C3] ? do_raw_spin_unlock+0x172/0x230 [ 286.933385][ C3] bus_probe_device+0x17f/0x1c0 [ 286.933400][ C3] device_add+0x1148/0x1aa0 [ 286.933417][ C3] ? __pfx_device_add+0x10/0x10 [ 286.933435][ C3] ? debugfs_create_file_full+0x41/0x60 [ 286.933451][ C3] hid_add_device+0x31b/0x5c0 [ 286.933467][ C3] usbhid_probe+0xd38/0x13f0 [ 286.933484][ C3] usb_probe_interface+0x303/0xa40 [ 286.933498][ C3] ? __pfx_usb_probe_interface+0x10/0x10 [ 286.933510][ C3] really_probe+0x23e/0xa90 [ 286.933526][ C3] __driver_probe_device+0x1de/0x440 [ 286.933541][ C3] driver_probe_device+0x4c/0x1b0 [ 286.933556][ C3] __device_attach_driver+0x1df/0x310 [ 286.933571][ C3] ? __pfx___device_attach_driver+0x10/0x10 [ 286.933585][ C3] bus_for_each_drv+0x156/0x1e0 [ 286.933597][ C3] ? __pfx_bus_for_each_drv+0x10/0x10 [ 286.933609][ C3] ? lockdep_hardirqs_on+0x7c/0x110 [ 286.933625][ C3] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 286.933642][ C3] __device_attach+0x1e4/0x4b0 [ 286.933660][ C3] ? __pfx___device_attach+0x10/0x10 [ 286.933680][ C3] ? do_raw_spin_unlock+0x172/0x230 [ 286.933703][ C3] bus_probe_device+0x17f/0x1c0 [ 286.933725][ C3] device_add+0x1148/0x1aa0 [ 286.933745][ C3] ? __pfx_device_add+0x10/0x10 [ 286.933761][ C3] ? preempt_schedule_thunk+0x16/0x30 [ 286.933783][ C3] usb_set_configuration+0x1187/0x1e20 [ 286.933807][ C3] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 286.933823][ C3] usb_generic_driver_probe+0xb1/0x110 [ 286.933838][ C3] usb_probe_device+0xec/0x3e0 [ 286.933854][ C3] ? __pfx_usb_probe_device+0x10/0x10 [ 286.933871][ C3] really_probe+0x23e/0xa90 [ 286.933887][ C3] __driver_probe_device+0x1de/0x440 [ 286.933900][ C3] ? usb_driver_applicable+0x1c7/0x220 [ 286.933913][ C3] driver_probe_device+0x4c/0x1b0 [ 286.933928][ C3] __device_attach_driver+0x1df/0x310 [ 286.933948][ C3] ? __pfx___device_attach_driver+0x10/0x10 [ 286.933963][ C3] bus_for_each_drv+0x156/0x1e0 [ 286.933975][ C3] ? __pfx_bus_for_each_drv+0x10/0x10 [ 286.933987][ C3] ? lockdep_hardirqs_on+0x7c/0x110 [ 286.934003][ C3] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 286.934021][ C3] __device_attach+0x1e4/0x4b0 [ 286.934035][ C3] ? __pfx___device_attach+0x10/0x10 [ 286.934050][ C3] ? do_raw_spin_unlock+0x172/0x230 [ 286.934067][ C3] bus_probe_device+0x17f/0x1c0 [ 286.934081][ C3] device_add+0x1148/0x1aa0 [ 286.934098][ C3] ? __pfx_device_add+0x10/0x10 [ 286.934114][ C3] ? usb_detect_static_quirks+0x335/0x3e0 [ 286.934130][ C3] ? __usb_get_extra_descriptor+0x158/0x1c0 [ 286.934145][ C3] usb_new_device+0xd07/0x1a60 [ 286.934163][ C3] ? do_raw_spin_lock+0x12c/0x2b0 [ 286.934177][ C3] ? __pfx_usb_new_device+0x10/0x10 [ 286.934195][ C3] ? mark_held_locks+0x49/0x80 [ 286.934209][ C3] hub_event+0x2f34/0x4fe0 [ 286.934237][ C3] ? __pfx_hub_event+0x10/0x10 [ 286.934252][ C3] ? interval_tree_remove+0x480/0xee0 [ 286.934272][ C3] ? rcu_is_watching+0x12/0xc0 [ 286.934290][ C3] process_one_work+0x9cc/0x1b70 [ 286.934308][ C3] ? __pfx_process_srcu+0x10/0x10 [ 286.934322][ C3] ? __pfx_process_one_work+0x10/0x10 [ 286.934339][ C3] ? assign_work+0x1a0/0x250 [ 286.934353][ C3] worker_thread+0x6c8/0xf10 [ 286.934370][ C3] ? __kthread_parkme+0x19e/0x250 [ 286.934382][ C3] ? __pfx_worker_thread+0x10/0x10 [ 286.934396][ C3] kthread+0x3c5/0x780 [ 286.934410][ C3] ? __pfx_kthread+0x10/0x10 [ 286.934423][ C3] ? rcu_is_watching+0x12/0xc0 [ 286.934439][ C3] ? __pfx_kthread+0x10/0x10 [ 286.934452][ C3] ret_from_fork+0x56d/0x730 [ 286.934464][ C3] ? __pfx_kthread+0x10/0x10 [ 286.934477][ C3] ret_from_fork_asm+0x1a/0x30 [ 286.934497][ C3] [ 286.934504][ C3] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 286.934512][ C3] CPU: 3 UID: 0 PID: 5986 Comm: kworker/3:3 Not tainted syzkaller #0 PREEMPT(full) [ 286.934525][ C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 286.934533][ C3] Workqueue: usb_hub_wq hub_event [ 286.934548][ C3] Call Trace: [ 286.934553][ C3] [ 286.934557][ C3] dump_stack_lvl+0x3d/0x1f0 [ 286.934569][ C3] vpanic+0x640/0x6f0 [ 286.934581][ C3] ? debug_print_object+0x1a2/0x2b0 [ 286.934594][ C3] panic+0xca/0xd0 [ 286.934604][ C3] ? __pfx_panic+0x10/0x10 [ 286.934619][ C3] ? check_panic_on_warn+0x1f/0xb0 [ 286.934631][ C3] check_panic_on_warn+0xab/0xb0 [ 286.934643][ C3] __warn+0xf6/0x3c0 [ 286.934654][ C3] ? debug_print_object+0x1a2/0x2b0 [ 286.934669][ C3] report_bug+0x3c3/0x580 [ 286.934685][ C3] ? debug_print_object+0x1a2/0x2b0 [ 286.934700][ C3] handle_bug+0x184/0x210 [ 286.934711][ C3] exc_invalid_op+0x17/0x50 [ 286.934723][ C3] asm_exc_invalid_op+0x1a/0x20 [ 286.934733][ C3] RIP: 0010:debug_print_object+0x1a2/0x2b0 [ 286.934748][ C3] Code: fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 54 41 56 48 8b 14 dd 20 52 d0 8b 4c 89 e6 48 c7 c7 a0 46 d0 8b e8 4f 0e d0 fc 90 <0f> 0b 90 90 58 83 05 56 60 b6 0b 01 48 83 c4 18 5b 5d 41 5c 41 5d [ 286.934758][ C3] RSP: 0018:ffffc900006f8a18 EFLAGS: 00010282 [ 286.934767][ C3] RAX: 0000000000000000 RBX: 0000000000000003 RCX: ffffffff81799b88 [ 286.934774][ C3] RDX: ffff888025a5a480 RSI: ffffffff81799b95 RDI: 0000000000000001 [ 286.934781][ C3] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 286.934787][ C3] R10: 0000000000000000 R11: 0000000000000000 R12: ffffffff8bd04d40 [ 286.934794][ C3] R13: ffffffff8b6fffe0 R14: ffffffff8a46cd40 R15: ffffc900006f8b18 [ 286.934802][ C3] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 286.934817][ C3] ? __warn_printk+0x198/0x350 [ 286.934827][ C3] ? __warn_printk+0x1a5/0x350 [ 286.934839][ C3] ? debug_print_object+0x1a1/0x2b0 [ 286.934853][ C3] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 286.934865][ C3] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 286.934881][ C3] debug_check_no_obj_freed+0x4b7/0x600 [ 286.934901][ C3] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 286.934924][ C3] kfree+0x291/0x6d0 [ 286.934942][ C3] ? rose_timer_expiry+0x53f/0x630 [ 286.934959][ C3] ? rose_timer_expiry+0x53f/0x630 [ 286.934974][ C3] rose_timer_expiry+0x53f/0x630 [ 286.934990][ C3] ? __pfx_rose_timer_expiry+0x10/0x10 [ 286.935005][ C3] call_timer_fn+0x19a/0x620 [ 286.935018][ C3] ? __pfx_call_timer_fn+0x10/0x10 [ 286.935034][ C3] ? mark_held_locks+0x49/0x80 [ 286.935045][ C3] ? __pfx_rose_timer_expiry+0x10/0x10 [ 286.935061][ C3] __run_timers+0x6ef/0x960 [ 286.935076][ C3] ? __pfx___run_timers+0x10/0x10 [ 286.935097][ C3] run_timer_base+0x114/0x190 [ 286.935109][ C3] ? __pfx_run_timer_base+0x10/0x10 [ 286.935122][ C3] run_timer_softirq+0x1a/0x40 [ 286.935133][ C3] handle_softirqs+0x219/0x8e0 [ 286.935150][ C3] ? __pfx_handle_softirqs+0x10/0x10 [ 286.935168][ C3] __irq_exit_rcu+0x109/0x170 [ 286.935182][ C3] irq_exit_rcu+0x9/0x30 [ 286.935198][ C3] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 286.935214][ C3] [ 286.935218][ C3] [ 286.935222][ C3] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 286.935234][ C3] RIP: 0010:console_flush_all+0x9a2/0xc60 [ 286.935248][ C3] Code: 00 e8 b2 f0 28 00 9c 5b 81 e3 00 02 00 00 31 ff 48 89 de e8 60 f8 20 00 48 85 db 0f 85 55 01 00 00 e8 e2 fc 20 00 fb 4c 89 e0 <48> c1 e8 03 42 80 3c 38 00 0f 84 11 ff ff ff 4c 89 e7 e8 a7 6f 89 [ 286.935258][ C3] RSP: 0018:ffffc900030ce568 EFLAGS: 00000287 [ 286.935267][ C3] RAX: ffffffff8ee38238 RBX: 0000000000000000 RCX: ffffc90030047000 [ 286.935274][ C3] RDX: 0000000000100000 RSI: ffffffff819a164e RDI: 0000000000000007 [ 286.935281][ C3] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000 [ 286.935288][ C3] R10: 0000000000000000 R11: 0000000000000000 R12: ffffffff8ee38238 [ 286.935294][ C3] R13: ffffffff8ee381e0 R14: ffffc900030ce5f8 R15: dffffc0000000000 [ 286.935305][ C3] ? console_flush_all+0x99e/0xc60 [ 286.935321][ C3] ? console_flush_all+0x99e/0xc60 [ 286.935339][ C3] ? __pfx_console_flush_all+0x10/0x10 [ 286.935357][ C3] ? is_printk_cpu_sync_owner+0x32/0x40 [ 286.935376][ C3] console_unlock+0xd8/0x210 [ 286.935390][ C3] ? __pfx_console_unlock+0x10/0x10 [ 286.935408][ C3] ? dev_printk_emit+0xfa/0x140 [ 286.935420][ C3] ? __down_trylock_console_sem+0xb0/0x140 [ 286.935434][ C3] vprintk_emit+0x3d7/0x680 [ 286.935449][ C3] ? __pfx_vprintk_emit+0x10/0x10 [ 286.935503][ C3] dev_printk_emit+0xfa/0x140 [ 286.935529][ C3] ? __pfx_dev_printk_emit+0x10/0x10 [ 286.935547][ C3] ? hid_device_probe+0x5ba/0x8d0 [ 286.935561][ C3] ? really_probe+0x23e/0xa90 [ 286.935573][ C3] ? __driver_probe_device+0x1de/0x440 [ 286.935586][ C3] ? driver_probe_device+0x4c/0x1b0 [ 286.935599][ C3] ? __device_attach_driver+0x1df/0x310 [ 286.935616][ C3] __dev_printk+0xf5/0x270 [ 286.935630][ C3] _dev_warn+0xe4/0x120 [ 286.935642][ C3] ? __pfx__dev_warn+0x10/0x10 [ 286.935653][ C3] ? lockdep_hardirqs_on+0x7c/0x110 [ 286.935669][ C3] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 286.935687][ C3] ? __pfx____ratelimit+0x10/0x10 [ 286.935705][ C3] hid_parser_main+0x840/0xe60 [ 286.935720][ C3] ? fetch_item+0x1bb/0x530 [ 286.935734][ C3] hid_open_report+0x459/0x830 [ 286.935749][ C3] ? __pfx_hid_open_report+0x10/0x10 [ 286.935768][ C3] ? __pfx_shield_probe+0x10/0x10 [ 286.935778][ C3] shield_probe+0x88/0x1320 [ 286.935789][ C3] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 286.935800][ C3] ? __pfx_shield_probe+0x10/0x10 [ 286.935812][ C3] ? mark_held_locks+0x49/0x80 [ 286.935823][ C3] ? hid_match_id+0x258/0x2e0 [ 286.935840][ C3] ? __pfx_shield_probe+0x10/0x10 [ 286.935851][ C3] hid_device_probe+0x5ba/0x8d0 [ 286.935867][ C3] ? __pfx_hid_device_probe+0x10/0x10 [ 286.935883][ C3] really_probe+0x23e/0xa90 [ 286.935899][ C3] __driver_probe_device+0x1de/0x440 [ 286.935914][ C3] driver_probe_device+0x4c/0x1b0 [ 286.935929][ C3] __device_attach_driver+0x1df/0x310 [ 286.935948][ C3] ? __pfx___device_attach_driver+0x10/0x10 [ 286.935962][ C3] bus_for_each_drv+0x156/0x1e0 [ 286.935974][ C3] ? __pfx_bus_for_each_drv+0x10/0x10 [ 286.935986][ C3] ? lockdep_hardirqs_on+0x7c/0x110 [ 286.936002][ C3] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 286.936019][ C3] __device_attach+0x1e4/0x4b0 [ 286.936033][ C3] ? __pfx___device_attach+0x10/0x10 [ 286.936047][ C3] ? do_raw_spin_unlock+0x172/0x230 [ 286.936063][ C3] bus_probe_device+0x17f/0x1c0 [ 286.936077][ C3] device_add+0x1148/0x1aa0 [ 286.936094][ C3] ? __pfx_device_add+0x10/0x10 [ 286.936111][ C3] ? debugfs_create_file_full+0x41/0x60 [ 286.936125][ C3] hid_add_device+0x31b/0x5c0 [ 286.936141][ C3] usbhid_probe+0xd38/0x13f0 [ 286.936156][ C3] usb_probe_interface+0x303/0xa40 [ 286.936169][ C3] ? __pfx_usb_probe_interface+0x10/0x10 [ 286.936182][ C3] really_probe+0x23e/0xa90 [ 286.936196][ C3] __driver_probe_device+0x1de/0x440 [ 286.936212][ C3] driver_probe_device+0x4c/0x1b0 [ 286.936227][ C3] __device_attach_driver+0x1df/0x310 [ 286.936241][ C3] ? __pfx___device_attach_driver+0x10/0x10 [ 286.936255][ C3] bus_for_each_drv+0x156/0x1e0 [ 286.936267][ C3] ? __pfx_bus_for_each_drv+0x10/0x10 [ 286.936279][ C3] ? lockdep_hardirqs_on+0x7c/0x110 [ 286.936295][ C3] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 286.936312][ C3] __device_attach+0x1e4/0x4b0 [ 286.936326][ C3] ? __pfx___device_attach+0x10/0x10 [ 286.936341][ C3] ? do_raw_spin_unlock+0x172/0x230 [ 286.936357][ C3] bus_probe_device+0x17f/0x1c0 [ 286.936371][ C3] device_add+0x1148/0x1aa0 [ 286.936388][ C3] ? __pfx_device_add+0x10/0x10 [ 286.936403][ C3] ? preempt_schedule_thunk+0x16/0x30 [ 286.936424][ C3] usb_set_configuration+0x1187/0x1e20 [ 286.936449][ C3] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 286.936463][ C3] usb_generic_driver_probe+0xb1/0x110 [ 286.936477][ C3] usb_probe_device+0xec/0x3e0 [ 286.936493][ C3] ? __pfx_usb_probe_device+0x10/0x10 [ 286.936510][ C3] really_probe+0x23e/0xa90 [ 286.936525][ C3] __driver_probe_device+0x1de/0x440 [ 286.936539][ C3] ? usb_driver_applicable+0x1c7/0x220 [ 286.936552][ C3] driver_probe_device+0x4c/0x1b0 [ 286.936566][ C3] __device_attach_driver+0x1df/0x310 [ 286.936581][ C3] ? __pfx___device_attach_driver+0x10/0x10 [ 286.936595][ C3] bus_for_each_drv+0x156/0x1e0 [ 286.936607][ C3] ? __pfx_bus_for_each_drv+0x10/0x10 [ 286.936619][ C3] ? lockdep_hardirqs_on+0x7c/0x110 [ 286.936634][ C3] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 286.936651][ C3] __device_attach+0x1e4/0x4b0 [ 286.936665][ C3] ? __pfx___device_attach+0x10/0x10 [ 286.936680][ C3] ? do_raw_spin_unlock+0x172/0x230 [ 286.936696][ C3] bus_probe_device+0x17f/0x1c0 [ 286.936710][ C3] device_add+0x1148/0x1aa0 [ 286.936727][ C3] ? __pfx_device_add+0x10/0x10 [ 286.936742][ C3] ? usb_detect_static_quirks+0x335/0x3e0 [ 286.936758][ C3] ? __usb_get_extra_descriptor+0x158/0x1c0 [ 286.936772][ C3] usb_new_device+0xd07/0x1a60 [ 286.936790][ C3] ? do_raw_spin_lock+0x12c/0x2b0 [ 286.936803][ C3] ? __pfx_usb_new_device+0x10/0x10 [ 286.936819][ C3] ? mark_held_locks+0x49/0x80 [ 286.936832][ C3] hub_event+0x2f34/0x4fe0 [ 286.936860][ C3] ? __pfx_hub_event+0x10/0x10 [ 286.936875][ C3] ? interval_tree_remove+0x480/0xee0 [ 286.936894][ C3] ? rcu_is_watching+0x12/0xc0 [ 286.936911][ C3] process_one_work+0x9cc/0x1b70 [ 286.936928][ C3] ? __pfx_process_srcu+0x10/0x10 [ 286.936945][ C3] ? __pfx_process_one_work+0x10/0x10 [ 286.936962][ C3] ? assign_work+0x1a0/0x250 [ 286.936976][ C3] worker_thread+0x6c8/0xf10 [ 286.936993][ C3] ? __kthread_parkme+0x19e/0x250 [ 286.937004][ C3] ? __pfx_worker_thread+0x10/0x10 [ 286.937017][ C3] kthread+0x3c5/0x780 [ 286.937030][ C3] ? __pfx_kthread+0x10/0x10 [ 286.937043][ C3] ? rcu_is_watching+0x12/0xc0 [ 286.937058][ C3] ? __pfx_kthread+0x10/0x10 [ 286.937071][ C3] ret_from_fork+0x56d/0x730 [ 286.937081][ C3] ? __pfx_kthread+0x10/0x10 [ 286.937094][ C3] ret_from_fork_asm+0x1a/0x30 [ 286.937114][ C3] [ 286.937981][ C3] Kernel Offset: disabled VM DIAGNOSIS: 05:59:51 Registers: info registers vcpu 0 CPU#0 RAX=0000000080010000 RBX=0000000000000000 RCX=ffffffff815fe6e3 RDX=ffff88801eae4900 RSI=ffffffff815fe72b RDI=ffffffff93809fe0 RBP=ffff88806a620000 RSP=ffffc90000007fd0 R8 =0000000000000001 R9 =fffffbfff27013fc R10=ffffffff93809fe7 R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff815fe72c RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f67eeced6c0 ffffffff 00c00000 GS =0000 ffff8880d6e67000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f67eececf98 CR3=0000000041280000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc4c4e53b6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc4c4e53b6 00007ffc4c4e53bc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f67ede12fbe ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f67ede12fcb ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f67ede12fc5 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f67ede12fd9 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f67ede1305f ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f67ede1313d ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f67edfb74a8 00007f67edfb74a0 00007f67edfb7498 00007f67edfb7470 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f67eeb1d100 00007f67edfb7460 00007f67edfb7478 00007f67edfb74c0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f67edfb74b8 00007f67edfb74b0 00007f67edfb74a8 00007f67edfb74a0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 8f147c926e2c5d95 fbddcab8396c7fa9 79377a281c573ea0 c928bc9b60ce6209 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 d3c1ab51fc018d5d aa89263dd2385904 763586236f4388e9 1915b86357300860 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 a776f7b69b3d589a 1d2529092d9cefa3 2f5d606a60150830 d47364d957bdc2a0 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6dc1b2b164524f3e eac92fd3d1dcd636 c32142757093a0bb 7d437ce0ef9986a2 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 dd868b267f7be997 79849a48953329bd acb230eeed8f147c 926e2c5d95fbddca ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000010001 RBX=0000000000000000 RCX=ffffffff815fe6e3 RDX=ffff88801daa2480 RSI=ffffffff815fe72b RDI=ffffffff93809fe0 RBP=ffff88806a720000 RSP=ffffc900006a0fd0 R8 =0000000000000001 R9 =fffffbfff27013fc R10=ffffffff93809fe7 R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff815fe72c RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6f67000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000200000000180 CR3=000000004a67f000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000315f6576616c 735f766461746162 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdb72d22e6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdb72d22e6 00007ffdb72d22ec ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc66f612fbe ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc66f612fcb ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc66f612fc5 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc66f612fd9 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc66f61305f ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc66f61313d ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc66f7b74a8 00007fc66f7b74a0 00007fc66f7b7498 00007fc66f7b7470 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc67031d100 00007fc66f7b7460 00007fc66f7b0004 0008000f0010000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc66f7b74b8 00007fc66f7b74b0 00007fc66f7b74a8 00007fc66f7b74a0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000080010000 RBX=0000000000000000 RCX=ffffffff815fe6e3 RDX=ffff888050fbc900 RSI=ffffffff815fe72b RDI=ffffffff93809fe0 RBP=ffff88806a820000 RSP=ffffc90000648fd0 R8 =0000000000000001 R9 =fffffbfff27013fc R10=ffffffff93809fe7 R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff815fe72c RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fdf983bdc80 ffffffff 00c00000 GS =0000 ffff8880d7067000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fdf9871fc14 CR3=000000002f8f3000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000010008000 Opmask01=0000000000000001 Opmask02=00000000f7efffdb Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0078756e696c6573 2f73662f7379732f ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0078756e696c6573 2f73662f7379732f ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 002d002b002b002b 002c002b00000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000030 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000018 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fdf98728b20 00007fdf98729050 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5f7a79732d766564 74656e002d2d0071 2d0065626f727064 6f6d2f6e6962732f ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000069 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85234285 RDI=ffffffff9ab75a40 RBP=ffffffff9ab75a00 RSP=ffffc900006f8480 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=552033203a555043 R12=0000000000000000 R13=0000000000000069 R14=ffffffff9ab75a00 R15=ffffffff85234220 RIP=ffffffff852342af RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d7167000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f2a0d3e2f98 CR3=0000000059efb000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000080040001 Opmask01=00000000c0000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc4c4e5230 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc4c4e53b6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc4c4e53b6 00007ffc4c4e53bc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f67ede12fbe ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f67ede12fcb ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f67ede12fc5 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f67ede12fd9 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f67ede1305f ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f67ede1313d ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0063696e61703d73 726f727265006f72 2d746e756f6d6572 3d73726f72726500 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00464c4b44551856 574a575740004a57 08514b504a484057 1856574a57574000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000